Gpg4win full changelog

Notes to Admins:
An update to this version is recommended due to the following security fixes:
A security bug in GpgOL has been fixed which could result in no warning shown to the user when a signed mail contained a not signed attachment after a signed one. (T8110)
The libpng component has been updated to version 1.6.55 to fix a security issue (CVE-2026-25646). This is only exploitable in our software if a mail is opened via Kleopatra.
Changes:
GUI (Kleopatra):
Kleopatra in Gpg4win and GnuPG Desktop uses now a blue icon (T8083)
New Registry key to allow saving CSR as PEM (T8115)
Removed "Forced Decryption" button in notepad (T8124)
Omit question about own key when importing a secret team key (T8098)
Add expired/revoked information to ldap search results (T8042)
Extract single folder archive without creating subfolder (T8022)
New filter for valid certificates (T7950)
Make the initial status of the check boxes of the sign/encrypt dialog configurable (T7831)
Add config option to only allow upload of own certificates to LDAP (T7772)
Changed dialog on import of secret key (T7637, T7502)
Improvement of clipboard actions (T7455)
Improved lookup of gpgconf executable (T8082)
Improvements for "Save Secret Team Key" (T8027, T8030)
Fix order of filters in settings dialog (T8079)
Formatting of QES signatures is no longer bold font (T8077)
Re-added support for config options RSAKeySizes and PGPKeyType (T8056)
Fix tab navigation in smart card table (T8051)
Some improvement in representation of signature verification (T8035)
Notepad now hides "signed" text if the signature is bad (T8020)
Make filesystem watcher notice new trustdb (T8015)
Fix handling of unset keyserver in configuration dialog (T8014)
Fix tab order in notepad (T8125, T7784)
Completed accessibility improvements of table column headings (T6568)
Don't show duplicate ldapservers in Kleopatra configuration (T7828)
Outlook Classic Add-In (GgpOL):
Make sure to check all attachments. (T8110)
A

A critical bug was found in the GnuPG versions included with Gpg4win 5.0.0 and the previous 3 beta versions. Please update as soon as possible to Gpg4win version 5.0.1

Kleopatra: The setting whether to show tags has been removed. The Tags column in the certificate lists can be shown/hidden the same way as the other columns. [T7204]
GpgOL: New feature to handle encrypted mails processed by the Titus data classification software. This can be disabled by setting the GpgOL Registry key "disableTitusHandling" to the string value "1". [rOc1b81f8737]
GpgOL: New optional feature to disable the automatic verification or decryption in the mail preview window. This feature can be enabled by setting the GpgOL Registry key "disableAutoPreview" to the string value "1". If enabled the new "Start Decryption" context menu item may be used to decrypt or verify a mail. [rO26c2fc196b] Possible workaround for issues due to third party Outlook AddIns.
Kleopatra: Decrypting archives with long filenames has been improved. [T7532]
Kleopatra: Certificates with multiple user IDs that have already been certified not-exportable can now be certified exportable. [T7600]
Kleopatra: Ensure that the decryption result window is visible when decrypting a file from the Windows Explorer. [T5780]
Kleopatra: Make showing the details of a certificate selected under "Encrypt for others" work again. [T7435]
Kleopatra: A crash was resolved that occurred when trying to decrypt something that was encrypted for a single hidden recipient. [T7476]
Kleopatra: Respect the default expiration date for key generation also when generating certificates for smart cards. [T7481]
GpgOL: Certificate groups are resolved again. [T7484]
GpgOL: A crash was resolved that sometimes occurred in the security approval window and that resulted in a "No recipients for encryption selected" error in Outlook. [T7312]
GpgOL: Fixed a crash on certain mails. [rO34d53b4309]
GpgOL: Fix setting of the content-id when sending multipart/related. [T5982]
GpgOL: Show signature status in ribbon for mails stored in files (.eml or .msg). [T6646]
G

Okular (GnuPG Edition): Gpg4win has been extended with the popular Okular PDF Viewer. Although our Okular version is currently considered experimental and therefore not installed by default, this provides the ability to legally sign and verify documents with the S/MIME certificates and smart cards GnuPG supports. The GnuPG Edition of Okular is optimized to be lightweight and to provide as little attack surface as possible. It does not support any active content like JavaScript or media files in PDF documents. It should therefore be more suitable in high security environments than other PDF readers.
GnuPG: The new component "keyboxd" is now enabled by default for new users of Gpg4win. keyboxd stores certificates (public keys) in an sqlite database and keeps it in memory. The resulting performance improvement can be quite large especially for users with large keyrings. Adventuresome users can enable it manually.