[Gpg4win-users-en] [Gpg4win-devel] Gpg4win 2.2.3 released
cai.0407 at gmail.com
Thu Nov 27 12:10:13 CET 2014
On Thu, 27 Nov 2014 10:37:04 +0100, Andre Heinecke wrote:
> On Thursday, November 27, 2014 01:50:42 PM Kosuke Kaizuka wrote:
>> I have one question about security fixes of GnuTLS. Is
>> GNUTLS-SA-2014-4 patched (disabling SSL 3.0)?
> No, but afaik we are not affected by this as we use gnutls through
> curl which disables SSLv3 by default. Probably should have included
> this fix anyway to be sure. I'll keep it in mind for the next
I see. Thank you for detail information.
>> GNUTLS-SA-2014-5 seems not to affect GnuTLS 2.12.x (2.12.x does
>> not support ECC).
> Yes this does not affect gnutls v2.
Kosuke Kaizuka <cai.0407 at gmail.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 884 bytes
Desc: OpenPGP digital signature
More information about the Gpg4win-users-en