[Gpg4win-devel] [Gpg4win-announce] Gpg4win 2.3.4 released

[Andre Heinecke]

Hello,

the development of Gpg4win-3.0 is still ongoing but we have  published good 
testing versions under:

	https://wiki.gnupg.org/Gpg4win/Testversions

Especially for GpgOL users 3.0 should be worth to try out.

In the meantime we want to announce the availability of the new, stable 
Gpg4win-2.3.4. This is a security/maintenance release which does not bring
new features but updates some base libraries and fixes a security vulnerability 
(CVE-2017-7526).

The download is available via the usual download page:

        http://www.gpg4win.org/download.html

You use Gpg4win? Then please help us with your donation that we can make 
maintenance and security updates in future as well! Thank you!

New in Gpg4win Version 2.3.4 (2017-07-06)
-----------------------------------------

- The cryptography library libgcrypt has been updated to version
  1.7.8 to include a fix for a side channel attack.
  [CVE-2017-7526] Details:
  https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html

- Support libraries have been updated.

- GPA was updated to 0.9.10. This includes a fix for file handling
  with filenames containing special characters.

- Included Gpg4win components are:  

    GnuPG:                2.0.30
    Kleopatra:            2.2.0-gitfb4ae3d
    GPA:                     0.9.9
    GpgOL:                 1.4.0
    GpgEX:                 1.0.4
    Kompendium DE:  3.0.0
    Kompendium EN:  3.0.0


Installation
------------
For installation instructions please read the new Gpg4win Compendium:
http://gpg4win.de/doc/en/gpg4win-compendium_11.html

The *ready to use installer* is available at:
  http://files.gpg4win.org/gpg4win-2.3.4.exe (26M)
  http://files.gpg4win.org/gpg4win-2.3.4.exe.sig

The second file is a digital signature of the the first file. 
Either check that this signature is fine or compare with one of the following 
checksums for gpg4win-2.3.4.exe:

SHA1: 26c38609dd4e67bbee65091d09f35356dcac0b58
SHA256: 9342019e69d14a360ba6d01e66733578bcfa1e00151d7ccfeba4cdc177ed224b

Please note that the signature is now also made by our new file distribution 
key to which we will migrate in the future. See:

	https://www.gpg4win.org/package-integrity.html

We like to thank our donors, the authors of the included packages and
all other contributors and first of all, those folks who stayed with us
and helped testing Gpg4win.


With best regards

    your Gpg4win Development Team

[1] https://wiki.gnupg.org/Gpg4win/Roadmap
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 821 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20170706/ba4a0d17/attachment-0001.asc>
-------------- next part --------------
_______________________________________________
Gpg4win-announce mailing list
Gpg4win-announce at wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/gpg4win-announce