[Gpg4win-users-en] When will the latest version of Gpg4win be patched with security fixes?

Kosuke Kaizuka cai.0407 at gmail.com
Mon Aug 4 14:54:00 CEST 2014


On Mon, 04 Aug 2014 11:57:35 +0800, Chris Marlow wrote:>
>>
>> GNU TLS is not GnuPG
> 
> gpg4win does use gnutls libraries, doesn't it?

Yes, Gpg4win includes gnutls as a TLS library.

Gpg4win 2.2.1 includes gnutls 2.12.21! (released on November 2012)
Current latest gnutls 2.12 branch is 2.12.23 (released on February
2013), and patches are available for GNUTLS-SA-2013-2, GNUTLS-SA-2014-1,
GNUTLS-SA-2014-2, but not available for GNUTLS-SA-2014-3.

-- 
Kosuke Kaizuka <cai.0407 at gmail.com>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-users-en/attachments/20140804/ce3bbe8e/attachment.sig>


More information about the Gpg4win-users-en mailing list