[Gpg4win-announce] Gpg4win 4.0.3 released

[Andre Heinecke]

Hello,

Gpg4win version 4.0.3 is released!

        https://www.gpg4win.org/download.html

This version is released as a security update outside of the normal
release plan and contains no new features.

A bug in GnuPG could be used to inject wrong status information in
signatures.  This could be abused to display a wrong validity in
Kleopatra and GpgOL.  An update is strongly recommended.

It is important to us that Gpg4win continues to be available
as Free Software which can be downloaded anonymously without costs.
Because we know that this is the only way for some people to get
a software product which enables them to protect their communication.
As Gpg4win maintenance needs to be funded nevertheless, we recommend
that you set the price for yourself that shows the value of Gpg4win.

For use with official documents with VS-NfD / EU / NATO RESTRICTED classification 
gnupg.com offers the option to obtain the approved GnuPG VS-Desktop version.

Details about Gpg4win 4.0.3:
    https://files.gpg4win.org/README-4.0.3.en.txt


Highlights in Gpg4win Version 4.0.3 (2022-07-12)
-------------------------------------------
* GnuPG: Security update to 2.3.7 to fix CVE-2022-34903.


We like to thank the authors of the included packages and first of all,
our supporters and customers who made this release possible.


With best regards

    your Gpg4win Development Team

-- 
GnuPG.com - a brand of g10 Code, the GnuPG experts.

g10 Code GmbH, Erkrath/Germany, AG Wuppertal HRB14459
GF Werner Koch, USt-Id DE215605608, www.g10code.com.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 5655 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-announce/attachments/20220712/d60b5e52/attachment.sig>