Release 2.3.8

NEWS

@@ -1,6 +1,63 @@
-Noteworthy changes in version 2.3.8 (unreleased)
+Noteworthy changes in version 2.3.8 (2022-10-13)
 ------------------------------------------------
 
+  * gpg: Do not consider unknown public keys as non-compliant while
+    decrypting.  [T6205]
+
+  * gpg: Avoid to emit a compliance mode line if Libgcrypt is
+    non-compliant.  [T6221]
+
+  * gpg: Improve --edit-key setpref command to ease c+p.  [rG1908fa8b83]
+
+  * gpg: Emit an ERROR status if --quick-set-primary-uid fails and
+    allow to pass the user ID by hash.  [T6126]
+
+  * gpg: Actually show symmetric+pubkey encrypted data as de-vs
+    compliant.  Add extra compliance checks for symkey_enc packets.
+    [T6119]
+
+  * gpg: In de-vs mode use SHA-256 instead of SHA-1 as implicit
+    preference.  [T6043]
+
+  * gpgsm: Fix reporting of bad passphrase error during PKCS#11
+    import.  [T5713,T6037]
+
+  * agent: Fix a regression in "READKEY --format=ssh".  [T6012]
+
+  * agent: New option --need-attr for KEYINFO.  [rG989eae648c]
+
+  * agent: New attribute "Remote-list" for use by KEYINFO.
+    [r1383aa4750]
+
+  * scd: Fix problem with Yubikey 5.4 firmware.  [T6070]
+
+  * dirmngr: Fix CRL Distribution Point fallback to other schemes.
+    [rG0c8299e2b5]
+
+  * dirmngr: New LDAP server flag "areconly" (A-record-only).
+    [rGd65a0335e5]
+
+  * dirmngr: Fix upload of multiple keys for an LDAP server specified
+    using the colon format.  [rG536b5cd663]
+
+  * dirmngr: Use LDAP schema v2 when a Base DN is specified.  [T6047]
+
+  * dirmngr: Avoid caching expired certificates.  [T6142]
+
+  * wkd: Fix path traversal attack in gpg-wks-server.  Add the mail
+    address to the pending request data.  [rG8a63a8c825,T6098]
+
+  * wkd: New command --mirror for gpg-wks-client.  [T6224]
+
+  * gpg-auth: New tool for authentication.  [T5862]
+
+  * New common.conf option no-autostart.  [rG203dcc19eb]
+
+  * Silence warnings from AllowSetForegroundWindow unless
+    GNUPG_EXEC_DEBUG_FLAGS is used.  [rG4ef8516a79]
+
+  Release-info: https://dev.gnupg.org/T6106
+
 
 Noteworthy changes in version 2.3.7 (2022-07-11)
 ------------------------------------------------

README

@@ -4,7 +4,7 @@
 
           Copyright 1997-2019 Werner Koch
           Copyright 1998-2021 Free Software Foundation, Inc.
-          Copyright 2003-2021 g10 Code GmbH
+          Copyright 2003-2022 g10 Code GmbH
 
 
 * INTRODUCTION
@@ -196,8 +196,8 @@
   Please direct questions about GnuPG to the users mailing list or one
   of the PGP newsgroups; please do not direct questions to one of the
   authors directly as we are busy working on improvements and bug
-  fixes.  The English and German mailing lists are watched by the
-  authors and we try to answer questions when time allows us.
+  fixes.  The mailing lists are watched by the authors and we try to
+  answer questions as time allows us.
 
   Commercial grade support for GnuPG is available; for a listing of
   offers see https://gnupg.org/service.html .  Maintaining and
@@ -206,9 +206,6 @@
   Koch, is bearing the majority of these costs.  To keep GnuPG in a
   healthy state, they need your support.
 
-  Please consider to donate at https://gnupg.org/donate/ .
-
-
 # This file is Free Software; as a special exception the authors gives
 # unlimited permission to copy and/or distribute it, with or without
 # modifications, as long as this notice is preserved. For conditions

build-aux/speedo.mk

@@ -500,7 +500,7 @@ gtk__ver = 2.24.17
 gitrep = ${HOME}/s
 
 # The tarball directories
-pkgrep = ftp://ftp.gnupg.org/gcrypt
+pkgrep = https://gnupg.org/ftp/gcrypt
 pkg10rep = ftp://ftp.g10code.com/g10code
 pkg2rep = $(TARBALLS)