Re: Many vulnerabilities in GnuPG

[Alan Coopersmith <alan.coopersmith () oracle com>]

On 12/29/25 01:15, Stephan Verbücheln wrote:
> GnuPG follows a traditional versioning scheme where even numbers (e.g.
> 2.2 and 2.4) are release branches and odd numbers (2.3 and 2.5) are
> developer branches. So what we have to wait for is 2.4.9 fixing the
> vulnerabilities.

Is that still true?

https://gnupg.org/ states:

  Note that the 2.5 series is now declared the stable version of GnuPG.
  Be aware that the oldstable 2.4 series will reach end-of-life in just
  6 months.

--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris