News 2006

On this page you'll find all the news in reverse chronological order of year 2006.

A news list of year 2005 is also available.

Important security update for GnuPG(2006-12-06 17:18:35)

Tavis Ormandy of the Gentoo security team identified a severe and exploitable bug in the processing of encrypted packets in GnuPG. Updating is highly suggested. A new version of GnuPG (1.4.6) as well has a patch to 2.0.1 has been released. ... [more]

Announcing the winner of the logo contest (2006-12-02 19:37:04)

And the winner is: Thomas Wittek ... [more]

GnuPG 2.0.1 released (2006-11-29 15:14:13)

We are pleased to announce the availability of GnuPG 2.0.1 ... [more]

Dirmngr 1.0.0 released (2006-11-29 15:14:13)

We are pleased to announce the availability of Dirmngr 1.0.0 ... [more]

GnuPG 2.0 released (2006-11-13 12:43:16)

We are pleased to announce the availability of GnuPG 2.0.0 ... [more]

GnuPG 1.9.92 released (2006-10-11 13:43:29)

We are pleased to announce the availability of GnuPG 1.9.92 - one of the last steps towards a 2.0 release. ... [more]

GnuPG Logo contest (2006-09-19 14:43:08)

After 8 years the time has come to modernize the GnuPG Logo and to work on a new layout of the website ... [more]

Gpg4win 1.0.6 released (2006-08-29 09:52:50)

We are pleased to announce the availibility of Gpg4win, version 1.0.6 ... [more]

Libgcrypt 1.2.3 released (2006-08-29 09:49:39)

We are pleased to announce the availability of Libgcrypt 1.2.3. Since this is a bugfix release, it does not include any new features... [more]

GnuPG 1.4.5 released (2006-08-01 17:42:11)

We are pleased to announce the availability of a new stable GnuPG release: Version 1.4.5 ... [more]

GnuPG 1.4.4 released (2006-06-25 15:57:40)

We are pleased to announce the availability of a new stable GnuPG release: Version 1.4.4 ... [more]

Gpg4win 1.0.1 released (2006-04-26 13:29:58)

We are pleased to announce the availibility of Gpg4win, version 1.0.1 ... [more]

Gpg4win released (2006-04-03 14:28:36)

After struggling for 6 month with Windows pecularities, we are finally pleased to announce the first stable release of Gpg4win, version 1.0.0... [more]

GnuPG 1.4.3 released (2006-04-03 14:28:36)

We are pleased to announce the availability of a new stable GnuPG release: Version 1.4.3 ... [more]

GnuPG does not detect injection of unsigned data (2006-03-09 20:02:28)

In the aftermath of the false positive signature verification bug more thorough testing of the fix has been done and another vulnerability has been detected. This new problem affects the use of gpg for verification of signatures which are not detached signatures. The problem also affects verification of signatures embedded in encrypted messages; i.e. standard use of gpg for mails. Update GnuPG as soon as possible to version 1.4.2.2! [more]

False positive signature verification in GnuPG (2006-02-15 12:43:54)

The Gentoo project identified a security related bug in GnuPG. When using any current version of GnuPG for unattended signature verification (e.g. by scripts and mail programs), false positive signature verification of detached signatures may occur. This problem affects the tool *gpgv*, as well as using "gpg --verify" to imitate gpgv, if only the exit code of the process is used to decide whether a detached signature is valid. [more]