Re: Maintainer for gnupg (and related) packages not responding – CVE unfixed

2016-07-20 Thread Christian Stadelmann
> On St, 2016-07-20 at 15:32 +, Christian Stadelmann wrote: > > Unfortunately libgcrypt-1.7 branch adds algorithms that are potentially > patent encumbered and I did not obtain response from legal yet. So > that's the reason why I did not move to 1.7 branch yet. Ok, so it isn't unmaintained.

Re: Maintainer for gnupg (and related) packages not responding – CVE unfixed

2016-07-20 Thread Tomas Mraz
On St, 2016-07-20 at 15:32 +, Christian Stadelmann wrote: > Hi > > I'm writing here since there are many known bugs (mostly fixed > upstream), including at least one CVE in a bunch of packages critical > to Fedora's integrity. > > Libgcrypt: > Version 1.7.2 is available: