Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1198130 > unrolled thread

Bug#1071552: gnupg: Please upgrade GnuPG >= 2.4.4, current GnuPG break Emacs's EasyPG

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1071552: gnupg: Please upgrade GnuPG >= 2.4.4, current GnuPG break Emacs's EasyPG Youhei SASAKI <uwabami@gfd-dennou.org> - 2024-05-21 06:20 +0200
    Bug#1071552: [pkg-gnupg-maint] Bug#1071552: gnupg: Please upgrade GnuPG >= 2.4.4, current GnuPG break Emacs's EasyPG Daniel Kahn Gillmor <dkg@fifthhorseman.net> - 2024-05-27 06:30 +0200
      Bug#1071552: Bug#1071552: gnupg: Please upgrade GnuPG >= 2.4.4, current GnuPG break Emacs's EasyPG Andreas Metzler <ametzler@bebt.de> - 2024-05-27 18:40 +0200

#1198130 — Bug#1071552: gnupg: Please upgrade GnuPG >= 2.4.4, current GnuPG break Emacs's EasyPG

Package: gnupg
Version: 2.2.43-6
Severity: critical

Dear Maintainer,

Current GnuPG package, version 2.2.43, brek Emacs's EasyPG.
We are no longer able to store encrypted files completely.

Well-kown issue: https://github.com/emacs-mirror/emacs/blob/master/etc/PROBLEMS
--- quote ---
*** Saving a file encrypted with GnuPG via EasyPG hangs.

This is known to happen with GnuPG v2.4.1.  The only known workaround
is to downgrade to a version of GnuPG older than 2.4.1, or upgrade to
version 2.4.4 and newer, which reportedly solves the problem.  Note
that GnuPG v2.2.42 and later also has this problem, so you should also
avoid those later 2.2.4x versions; v2.2.41 is reported to work fine.
--- quote ---

See also https://dev.gnupg.org/T6481

Please upgrade GnuPG >= 2.4.4 or newer. 

Best Wishes,

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.8.9-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8), LANGUAGE=ja:en_US
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnupg depends on:
ii  dirmngr         2.2.43-6
ii  gnupg-l10n      2.2.43-6
ii  gnupg-utils     2.2.43-6
ii  gpg             2.2.43-6
ii  gpg-agent       2.2.43-6
ii  gpg-wks-client  2.2.43-6
ii  gpgsm           2.2.43-6
ii  gpgv            2.2.43-6

gnupg recommends no packages.

Versions of packages gnupg suggests:
pn  gpg-wks-server  <none>
pn  parcimonie      <none>
pn  xloadimage      <none>

-- no debconf information

[toc] | [next] | [standalone]

#1198822 — Bug#1071552: [pkg-gnupg-maint] Bug#1071552: gnupg: Please upgrade GnuPG >= 2.4.4, current GnuPG break Emacs's EasyPG

[Multipart message — attachments visible in raw view] — view raw

Control: affects 1071552 + emacs-el
Control: retitle 1071552 GnuPG 2.2.42+ breaks emacs' EasyPG

On Tue 2024-05-21 13:05:02 +0900, Youhei SASAKI wrote:
> Package: gnupg
> Version: 2.2.43-6
> Severity: critical

I see that Andreas has reduced the severity of 1071552 from 'critical'
to 'important'.  I think that the bugs we're seeing with easypg are
pretty severe.  I would personally mark this bug report "serious",
because i think it is unfit to be merged into testing until the package
can work correctly with EasyPG.

> Current GnuPG package, version 2.2.43, brek Emacs's EasyPG.
> We are no longer able to store encrypted files completely.
>
> Well-kown issue: https://github.com/emacs-mirror/emacs/blob/master/etc/PROBLEMS
> --- quote ---
> *** Saving a file encrypted with GnuPG via EasyPG hangs.
>
> This is known to happen with GnuPG v2.4.1.  The only known workaround
> is to downgrade to a version of GnuPG older than 2.4.1, or upgrade to
> version 2.4.4 and newer, which reportedly solves the problem.  Note
> that GnuPG v2.2.42 and later also has this problem, so you should also
> avoid those later 2.2.4x versions; v2.2.41 is reported to work fine.
> --- quote ---
>
> See also https://dev.gnupg.org/T6481
>
> Please upgrade GnuPG >= 2.4.4 or newer. 

I don't think this is a reasonable solution as of how the 2.4.x branch
is designed right now, and the fact that upstream doesn't appear to
intend the 2.4.x series as a long-term support series either.  My
understanding is that the upstream 2.4.x packages of GnuPG (which are
visible in experimental today) introduce potentially serious
incompatibilities into the OpenPGP ecosystem, and i don't think it's
reasonable for debian to ship those versions until they are producing
things that are compatible with most other OpenPGP implementations.

Sadly, GnuPG upstream appears to be abandoning the OpenPGP standard, and
despite reasonable attempts to convince them to interoperate, i don't
see that changing.

Would anyone be willing to try to backport the patches from upstream's
fixes for T6481 to the 2.2.x series?

      --dkg

[toc] | [prev] | [next] | [standalone]

#1198895 — Bug#1071552: Bug#1071552: gnupg: Please upgrade GnuPG >= 2.4.4, current GnuPG break Emacs's EasyPG

Control: severity -1 serious

On 2024-05-27 Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
> Control: affects 1071552 + emacs-el
> Control: retitle 1071552 GnuPG 2.2.42+ breaks emacs' EasyPG

> On Tue 2024-05-21 13:05:02 +0900, Youhei SASAKI wrote:
> > Package: gnupg
> > Version: 2.2.43-6
> > Severity: critical

> I see that Andreas has reduced the severity of 1071552 from 'critical'
> to 'important'.  I think that the bugs we're seeing with easypg are
> pretty severe.  I would personally mark this bug report "serious",
> because i think it is unfit to be merged into testing until the package
> can work correctly with EasyPG.
[...]

Hello,

I had second thoughts about how far to downgrade, too
<https://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/2024-May/009393.html>
but "critical" was evidently not correct. Let's go with "in the package
maintainer's [...] opinion". ;-)

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web