hello. GnuPG 2.2.25 has been released it fixes bug which affects me. but arch only has Version 2.2.24-1 in testing. my question is why it haven't been updated? if the maintainer simply does not have time yet, then I understand, but maybe there is another reason? There is only one bug fixed between 2.2.24 and 2.2.25, and it introduces 3 lines of code:
---- DIFF -------------------------------------------------------------- diff --git a/scd/app-openpgp.c b/scd/app-openpgp.c index 6245a5331..ec60db2e6 100644 --- a/scd/app-openpgp.c +++ b/scd/app-openpgp.c @@ -4392,10 +4392,15 @@ check_keyidstr (app_t app, const char *keyidstr, int keyno, int *r_use_auth) const char *s; int n; const char *fpr = NULL; + int i; if (r_use_auth) *r_use_auth = 0; + /* Make sure we have load the public keys. */ + for (i = 0; i < 3; i++) + get_public_key (app, i); + if (strlen (keyidstr) < 32) return gpg_error (GPG_ERR_INV_ID); else ------------------------------------------------------------- /DIFF ---- Aside from what SET said, about building the whole 2.2.25, if that’s the bug affecting you you may just apply a patch over 2.2.24 and build it.