[Gpg4win-devel] [Gpg4win-users-en] Gpg4win 2.2.3 released

[Kosuke Kaizuka]

Hi,

On Thu, 27 Nov 2014 10:37:04 +0100, Andre Heinecke wrote:
> On Thursday, November 27, 2014 01:50:42 PM Kosuke Kaizuka wrote:
>> I have one question about security fixes of GnuTLS. Is
>> GNUTLS-SA-2014-4 patched (disabling SSL 3.0)?
> 
> No, but afaik we are not affected by this as we use gnutls through
> curl which disables SSLv3 by default. Probably should have included
> this fix anyway to be sure. I'll keep it in mind for the next
> release.

I see. Thank you for detail information.

>> GNUTLS-SA-2014-5 seems not to affect GnuTLS 2.12.x (2.12.x does
>> not support ECC).
> 
> Yes this does not affect gnutls v2.

Good.

-- 
Kosuke Kaizuka <cai.0407 at gmail.com>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 884 bytes
Desc: OpenPGP digital signature
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20141127/d4c8404a/attachment.sig>