BSD Ports

Vulnerable: version 2.5.22 is affected by 3 known vulnerabilities. See below.

security/gnupg2 2.5.22 NetBSD

GnuPG with OpenPGP and S/MIME capabilities

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
12d79e17c5
License
gnu-gpl-v3
Categories
security
Package size
2567.0 KiB, 13092.8 KiB installed

Description

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC4880.

This package contains the full suite of GnuPG tools for cryptographic communications and data storage.

In the other systems

SystemPortVersion
NetBSDsecurity/gnupg22.5.22
MidnightBSDsecurity/linux-rl9-gnupg2.3.3_1

Install

Binary package:

pkgin install gnupg2

From pkgsrc:

cd /usr/pkgsrc/security/gnupg2 && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_642.5.22
NetBSD 10.1 aarch642.5.20nb2
SmartOS / illumos x86_642.5.24nb1
macOS 15 arm642.5.24nb1

Dependencies

Run dependencies 10
Required by 247

The first 100 are listed.

Known vulnerabilities 3

Commit history 5

DateCommitCreditsLog message
12d79e17c5 wiz gnupg2: update to 2.5.24nb1.
Same as before, with an additional upstream patch to fix the regression.
3e303c1941 wiz gnupg2: downgrade to 2.5.22.
This version breaks notmuch, upstream discussion ongoing, update in wip/gnupg2 in case you want it.
e3ff35a3ff wiz gnupg2: update to 2.5.24.
Noteworthy changes in version 2.5.24 (2026-09-23) ------------------------------------------------- * Bug fixes: - scd: Fix for regression in 2.5.23 related to the new Nitrokey detection. [T8331] Release-info: https://dev.gnupg.org/T8425 Noteworthy changes in version 2.5.23 (2026-09-22) ------------------------------------------------- * New and extended features: - gpg: New option --allow-9980 to enable the processing of RFC-9980 specified data structures. The use of this option is only recommended if external policy requirements demand the use of these governmental approved specification. PGP folks requiring some PQC resistance should keep on using the standard LibrePGP Kyber algorithm introduced 2 years ago. [rG6803ce215c] …
15745d8e9b adam gnupg2: updated to 2.5.22
Noteworthy changes in version 2.5.22 (2026-08-31) * New and extended features: - gpg: New option "primary" for the --card-edit "generate" command. This option is useful create only the primary key on the first slot of an OpenPGP card. [T8344] - Make detection of the installation directory work for macOS. [rG0be940905d] - gpgsm: Emit issuer and serial no. when the certificate is not found. [T8363] * Bug fixes: - gpg: Fix trustdb recursive lock problem. [T8317] - gpg: Fix using wrong fingerprint length for the intended recipient fingerprint. [T8330] - gpg: Fix wrong assertion edge case in building packets. [rGe319d82d7e] - gpg: Fix possible double free in import_revoke_cert. [T8328] - gpg: Fix long standing regression of "bkuptocard". …
5f89c7792a adam gnupg2: updated to 2.5.21
Noteworthy changes in version 2.5.21 (2026-07-02) * New and extended features: - gpg, gpgsm: Use partial file on decryption, remove on failure. Disable with "--compatibility-flags=no-partial-file-guard". - gpg: Use the INT_RCP_FPR subpacket in revocation signatures. - Create a pkgversioninfo.txt file when building using the speedo build system. * Bug fixes: - gpg: Fix potential use-after-free in batch key generation when handling the keyserver URL option. - gpgsm: Fix regression in gpgsm_verify with expired certificates. - gpgsm: Require a minimum tag length for GCM decryption. - scd: Limit the size of returned APDU objects from faulty cards. - scd: Fix condition to retrieve ATR. - scd:openpgp: Fix regression in CHV1 retry counter byte index. …