Re: [Announce] [CVE-2022-3515] GnuPG / Libksba Security Advisory

2022-10-18 Thread Werner Koch via Gnupg-users
On Tue, 18 Oct 2022 08:59, Alessandro Vesely said: > Debian fix kept the old version number 1.5.0-3, though: FWIW: Debian thus misses * Allow an OCSP server not to return the sent nonce. [rK24992a4a7a] * Limited support for the Authenticated-Enveloped-Data content type. [rK81fdcd680c12]

[Announce] GnuPG for OS X 2.3.8 released

2022-10-18 Thread Ralph Seichter via Gnupg-users
GnuPG for OS X / macOS release 2.3.8 is now available for download via https://sourceforge.net/p/gpgosx/docu/Download/ . The disk image signature key was uploaded to keyservers in July 2022 and should now be widely available. It can also be downloaded using the URL

Re: [Announce] [CVE-2022-3515] GnuPG / Libksba Security Advisory

2022-10-18 Thread Alessandro Vesely via Gnupg-users
On Mon 17/Oct/2022 09:43:56 +0200 Werner Koch via Gnupg-users wrote: How to check whether GnuPG has been fixed ~ GnuPG is the most prominent user of Libksba and it is not immediately visible whether a fixed version of Libksba is used. To check this