[Announce] Gpg4win 1.0.3 released (security fix)
wk at gnupg.org
Mon Jun 26 16:00:09 CEST 2006
We are pleased to announce the availibility of Gpg4win, version 1.0.3.
* This version contains security fixes for the GnuPG and Sylpheed-Claws
components. *Updating to this version is strongly recommended*.
* Please also make sure to subscribe to the new gpg4win announcement
mailing list. We might stop in the future to cross post
announcements to the general GnuPG annoucement list. See:
The Gpg4win project aims at updating the Gpg4win Windows installation
package with GnuPG encryption tool, associated applications and
documentation on a regular basis. Especially the documentation
(handbooks "Einsteiger" and "Durchblicker") are directly maintained as
part of the gpg4win project.
It is an international project. Due to the origin of the project the
German language is fully supported. As of now the the handbooks are
only available in German. People helping with translations are very
The main difference compared to all other similar approaches (mainly
GnuPP, GnuPT, Windows Privacy Tools and GnuPG-Basics) is that the
first thing developed was the *gpg4win-Builder*. This builder allows
to easily create new gpg4win.exe installers with updated components.
The builder runs on any decent Unix system, preferable Debian
GNU/Linux. Almost all products are automatically cross-compiled for
integration into the installer.
With this concept it is hoped to *prevent quick aging of the*
*installer package*. This is due to easier updating and less
dependancy on single developers.
Noteworthy changes in version 1.0.3 (2006-06-26)
* Fixed a security related bug in GnuPG (CVE-2006-3082).
* Updated Sylpheed-Claws due to security problems.
* Included components are:
GnuPG: 1.4.4 [*]
WinPT: 0.12.3 [*]
Sylpheed-Claws: 2.3.1 [*]
(Marked packages are updated since the last release)
For installation instructions, please visit http://www.gpg4win.org or
Developers who want to *build an installer* need to get the following
files from http://wald.intevation.org/projects/gpg4win/ :
The second file is a digital signature of the the first file. Either
check that this signature is fine or compare with the checksums given
below. (see also http://www.gnupg.org/download/integrity_check.html)
The *ready to use installer* is available at:
Or using the ftp protocol at:
SHA1 and MD5 checksums for these files are given below.
If you don't need the German PDF manuals, you might alternatively
download the "light" version of the installer:
or using the ftp protocol at:
A separate installer with the the sources used to build the above
installer is available at:
Most people don't need this source installer; it is merely stored on
that server to satisfy the conditions of the GPL. In general it is
better to get the gpg4win builder tarball (see above) and follow the
instructions in the README to build new installers; building the
installer is not possible on Windows machines and works best on
current Debian GNU/Linux systems (we use the mingw32 package from
SHA1 checksums are:
MD5 checksums are:
We like to thank the authors of the included packages, the NSIS
authors, all other contributors and first of all, those folks who
stayed with us and tested the early releases of gpg4win.
Jan, Marcus, Timo and Werner
Werner Koch <wk at gnupg.org>
The GnuPG Experts http://g10code.com
Join the Fellowship and protect your Freedom! http://www.fsfe.org
More information about the Gnupg-announce