[Gpg4win-announce] Gpg4win 2.3.4 released

Hello, the development of Gpg4win-3.0 is still ongoing but we have published good testing versions under: https://wiki.gnupg.org/Gpg4win/Testversions Especially for GpgOL users 3.0 should be worth to try out. In the meantime we want to announce the availability of the new, stable Gpg4win-2.3.4. This is a security/maintenance release which does not bring new features but updates some base libraries and fixes a security vulnerability (CVE-2017-7526). The download is available via the usual download page: http://www.gpg4win.org/download.html You use Gpg4win? Then please help us with your donation that we can make maintenance and security updates in future as well! Thank you! New in Gpg4win Version 2.3.4 (2017-07-06) ----------------------------------------- - The cryptography library libgcrypt has been updated to version 1.7.8 to include a fix for a side channel attack. [CVE-2017-7526] Details: https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html - Support libraries have been updated. - GPA was updated to 0.9.10. This includes a fix for file handling with filenames containing special characters. - Included Gpg4win components are: GnuPG: 2.0.30 Kleopatra: 2.2.0-gitfb4ae3d GPA: 0.9.9 GpgOL: 1.4.0 GpgEX: 1.0.4 Kompendium DE: 3.0.0 Kompendium EN: 3.0.0 Installation ------------ For installation instructions please read the new Gpg4win Compendium: http://gpg4win.de/doc/en/gpg4win-compendium_11.html The *ready to use installer* is available at: http://files.gpg4win.org/gpg4win-2.3.4.exe (26M) http://files.gpg4win.org/gpg4win-2.3.4.exe.sig The second file is a digital signature of the the first file. Either check that this signature is fine or compare with one of the following checksums for gpg4win-2.3.4.exe: SHA1: 26c38609dd4e67bbee65091d09f35356dcac0b58 SHA256: 9342019e69d14a360ba6d01e66733578bcfa1e00151d7ccfeba4cdc177ed224b Please note that the signature is now also made by our new file distribution key to which we will migrate in the future. See: https://www.gpg4win.org/package-integrity.html We like to thank our donors, the authors of the included packages and all other contributors and first of all, those folks who stayed with us and helped testing Gpg4win. With best regards your Gpg4win Development Team [1] https://wiki.gnupg.org/Gpg4win/Roadmap -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 821 bytes Desc: This is a digitally signed message part. URL: <http://lists.wald.intevation.org/pipermail/gpg4win-announce/attachments/20170706/ba4a0d17/attachment.asc>