[Gpg4win-devel] [Gpg4win-users-en] Gpg4win 2.2.3 released

[Andre Heinecke]

Hi,

On Thursday, November 27, 2014 01:50:42 PM Kosuke Kaizuka wrote:
> On Wed, 26 Nov 2014 16:29:56 +0100, Andre Heinecke wrote:
> > we are pleased to announce the availability of the new stable Gpg4win
> > version 2.2.3.
> 
> Excellent! Both Full and Light work fine with Win7 x64 SP1.

Thanks for testing.

> I have one question about security fixes of GnuTLS.
> Is GNUTLS-SA-2014-4 patched (disabling SSL 3.0)?

No, but afaik we are not affected by this as we use gnutls through curl which 
disables SSLv3 by default.
Probably should have included this fix anyway to be sure. I'll keep it in mind 
for the next release.

> GNUTLS-SA-2014-5 seems not to affect GnuTLS 2.12.x (2.12.x does not
> support ECC).

Yes this does not affect gnutls v2.

Regards,
Andre

-- 
Andre Heinecke |  ++49-541-335083-262  |  http://www.intevation.de/
Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20141127/bb77b93e/attachment.sig>