Changelog for gpg2-2.2.27-3.14.11.i586.rpm :

* Wed Nov 22 2023 Otto Hollmann - Suppress error message on trial reading as PEM format when using dirmngr to validate broken DER encoded files (bsc#1217212)
* Add patches: - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch
* Mon Jul 18 2022 David Anes - Security fix [CVE-2022-34903, bsc#1201225] - Vulnerable to status injection - Added patch gnupg-CVE-2022-34903.patch
* Wed Jun 08 2022 Marcus Meissner - gnupg-detect_FIPS_mode.patch: use AES as default cipher instead of 3DES if we are in FIPS mode. (bsc#1196125)
* Mon Feb 22 2021 Pedro Monreal - Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]- Remove patches fixed upstream:
* gnupg-gpg-agent-ssh-agent.patch
* gnupg-2.2.22-fix-segv-import-keys.patch
* gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
* gnupg-CRL-fetching-via-https.patch
* gnupg-CVE-2018-1000858.patch
* gnupg-CVE-2018-12020.patch
* gnupg-CVE-2019-13050_0_of_5.patch
* gnupg-CVE-2019-13050_1_of_5.patch
* gnupg-CVE-2019-13050_2_of_5.patch
* gnupg-CVE-2019-13050_3_of_5.patch
* gnupg-CVE-2019-13050_4_of_5.patch
* gnupg-CVE-2019-13050_5_of_5.patch
* gnupg-CVE-2019-14855.patch- Update gpg2.keyring
* Tue Jan 12 2021 Andreas Stieger - GnuPG 2.2.27:
* gpgconf: Fix case with neither local nor global gpg.conf
* gpgconf: Fix description of two new options- includes changes from 2.2.26:
* gpg: New AKL method \"ntds\"
* gpg: Fix --trusted-key with fingerprint arg
* scd: Fix writing of ECC keys to an OpenPGP card
* scd: Make an USB error fix specific to SPR532 readers
* dirmngr: With new LDAP keyservers store the new attributes. Never store the useless pgpSignerID. Fix a long standing bug storing some keys on an ldap server.
* dirmngr: Support the new Active Direcory LDAP schema for keyservers
* dirmngr: Allow LDAP OpenPGP searches via fingerprint
* dirmngr: Do not block other threads during keyserver LDAP calls
* Support global configuration files
* Fix the iconv fallback handling to UTF-8
* Mon Nov 23 2020 Andreas Stieger - GnuPG 2.2.25:
* scd: Fix regression in 2.2.24 requiring gpg --card-status before signing or decrypting
* gpgsm: Using Libksba 1.5.0 signatures with a rarely used combination of attributes can now be verified
* Tue Nov 17 2020 Andreas Stieger - GnuPG 2.2.24:
* gpg: New command --quick-revoke-sig
* gpg: Do not use weak digest algos if selected by recipient preference during sign+encrypt
* gpg: Switch to AES256 for symmetric encryption in de-vs mode
* gpg: Silence weak digest warnings with --quiet
* gpg: Print new status line CANCELED_BY_USER for a cancel during symmetric encryption
* gpg: Fix the encrypt+sign hash algo preference selection for ECDSA. This is in particular needed for keys created from existing smartcard based keys
* agent: Fix secret key import of GnuPG 2.3 generated Ed25519 keys
* agent: Keep some permissions of private-keys-v1.d
* dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and gnutls builds
* dirmngr: Fix the pool keyserver case for a single host in the pool
* scd: Fix the use case of verify_chv2 by CHECKPIN
* scd: Various improvements to the ccid-driver
* scd: Minor fixes for Yubikey
* gpgconf: New option --show-versions
* i18n: Complete overhaul and completion of the Italian translation
* Thu Sep 03 2020 Andreas Stieger - GnuPG 2.2.23:
* gpg: fix AHEAD preference list overflow boo#1176034 / CVE-2020-25125
* gpg: fix possible segv in the key cleaning code
* gpgsm: fix a minor RFC2253 parser gub
* scdaemon: Fix a PIN verify failure on certain OpenPGP card implementations
* Wed Sep 02 2020 Pedro Monreal - Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]- Add gnupg-2.2.22-fix-segv-import-keys.patch
* Tue Sep 01 2020 Andreas Stieger - GnuPG 2.2.22:
* gpg: Change the default key algorithm to rsa3072
* gpg: Add regular expression support for Trust Signatures on all platforms
* gpg: Ignore --personal-digest-prefs for ECDSA keys
* gpgsm: Make rsaPSS a de-vs compliant scheme
* gpgsm: Show also the SHA256 fingerprint in key listings
* gpgsm: Do not require a default keyring for --gpgconf-list
* gpg-agent: Default to extended key format and record the creation time of keys Add new option --disable-extended-key-format
* gpg-agent: Support the WAYLAND_DISPLAY envvar
* gpg-agent: Allow using --gpgconf-list even if HOME does not exist
* gpg-agent: Make the Pinentry work even if the envvar TERM is set to the empty string
* scdaemon: Add a workaround for Gnuk tokens <= 2.15 which wrongly incremented the error counter when using the \"verify\" command of \"gpg --edit-key\" with only the signature key being present
* dirmngr: Better handle systems with disabled IPv6
* gpgpslit: Install tool. It was not installed in the past to avoid conflicts with the version installed by GnuPG 1.4
* gpgtar: Make --files-from and --null work as documented- drop gnupg-gpgme-t-encrypt-sym.patch, upstream