gpgme 1.4.4 and 1.5.1 released

Kristian Fiskerstrand kristian.fiskerstrand at sumptuouscapital.com
Thu Jul 31 10:56:14 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 07/31/2014 10:40 AM, Bernhard Reiter wrote:
> Gpgme 1.4.4 and 1.5.1 can be found on the servers, released by
> Werner, and it is not on the website yet. He probably gets to doing
> a real announcement soon.
> 

In the mean time, please see  CVE-2014-3564 gpgme: heap-based buffer
overflow in gpgsm status handler[0]

References:
[0] http://seclists.org/oss-sec/2014/q3/266


- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Prævenire melius est quam præveniri
It is better to precede than to be preceded
-----BEGIN PGP SIGNATURE-----
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=TB/o
-----END PGP SIGNATURE-----



More information about the Gnupg-devel mailing list