From wk на gnupg.org  Fri Feb  2 10:14:16 2007
From: wk на gnupg.org (Werner Koch)
Date: Fri, 02 Feb 2007 10:14:16 +0100
Subject: [gnupg-ru] [Announce] Libgcrypt 1.2.4 released
Message-ID: <87wt30syzb.fsf@wheatstone.g10code.de>

Hello! 

We are pleased to announce the availability of Libgcrypt 1.2.4.

Libgcrypt is a general purpose library of cryptographic building
blocks.  It is originally based on the code used in GnuPG.

This is a bug fix release solving a few minor issues.  There are no
new features.  If you experience problems with an application using
libgcrypt, you might want to update to this version.

Noteworthy changes are:

 * Fixed a bug in the memory allocator which could have been the
   reason for some non-duplicable bugs.

 * Other minor bug fixes.

Source code is hosted at the GnuPG FTP server and its mirrors as
listed at http://www.gnupg.org/download/mirrors.html .  On the primary
server the source files and there digital signatures are:

  ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.2.4.tar.bz2 (781k)
  ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.2.4.tar.bz2.sig

These files are bzip2 compressed.  If you can't use the bunzip2 tool,
gzip compressed versions of the files are also available:

  ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.2.4.tar.gz (990k)
  ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.2.4.tar.gz.sig

As an alternative a patch against version 1.2.3 is available as:

  ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.2.3-1.2.4.diff.bz2 (87k)

SHA-1 checksums are:

c72406c69d6ad9fb3fa1e9824b04566cf204093b  libgcrypt-1.2.4.tar.bz2
d279e7a4464cccf0cc4e29c374a1e8325fc65b9a  libgcrypt-1.2.4.tar.gz
d4f5525fa26e92ade2914c6581435171f8b4fc44  libgcrypt-1.2.3-1.2.4.diff.bz2

For help on installing or developing with Libgcrypt you should send
mail to the grcypt-devel mailing list.  For details see
http://www.gnupg.org/documentation/mailing-lists.html .

Improving Libgcrypt is costly, but you can help!  We are looking for
organizations that find Libgcrypt useful and wish to contribute back.
You can contribute by reporting bugs, improve the software [1], or by
donating money.

Commercial support contracts for Libgcrypt are available [2], and they
help finance continued maintenance.  g10 Code GmbH, a Duesseldorf
based company owned and headed by gpg's principal author, is currently
funding Libgcrypt development.  We are always looking for interesting
development projects.


Happy hacking,

  Werner


[1] As a GNU project copyright assignments to the FSF are required.
[2] See the service directory at http://www.gnupg.org/service.html .

-- 
Werner Koch                                      <wk на gnupg.org>
The GnuPG Experts                                http://g10code.com
Join the Fellowship and protect your Freedom!    http://www.fsfe.org
----------- следущая часть -----------
Вложение не в текстовом формате было извлечено&hellip;
Имя     : отсутствует
Тип     : application/pgp-signature
Размер  : 196 байтов
Описание: отсутствует
Url     : /pipermail/attachments/20070202/6194bdae/attachment.pgp 
----------- следущая часть -----------
_______________________________________________
Gnupg-announce mailing list
Gnupg-announce на gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-announce

From wk на gnupg.org  Fri Feb  2 10:36:55 2007
From: wk на gnupg.org (Werner Koch)
Date: Fri, 02 Feb 2007 10:36:55 +0100
Subject: [gnupg-ru] [Announce] GnuPG 2.0.2 released
Message-ID: <87sldosxxk.fsf@wheatstone.g10code.de>

Hello!
    
We are pleased to announce the availability of a new stable GnuPG-2
release: Version 2.0.2

This is maintenance release to fix build problems found after the
release of 2.0.1.  There are also some minor enhancements.

The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication
and data storage.  It can be used to encrypt data, create digital
signatures, help authenticating using Secure Shell and to provide a
framework for public key cryptography.  It includes an advanced key
management facility and is compliant with the OpenPGP and S/MIME
standards.

GnuPG-2 has a different architecture than GnuPG-1 (e.g. 1.4.6) in that
it splits up functionality into several modules.  However, both
versions may be installed alongside without any conflict.  In fact,
the gpg version from GnuPG-1 is able to make use of the gpg-agent as
included in GnuPG-2 and allows for seamless passphrase caching.  The
advantage of GnuPG-1 is its smaller size and the lack of dependency on
other modules at run and build time.  We will keep maintaining GnuPG-1
versions because they are very useful for small systems and for server
based applications requiring only OpenPGP support.

GnuPG is distributed under the terms of the GNU General Public License
(GPL).  GnuPG-2 works best on GNU/Linux or *BSD systems. 


Getting the Software
====================

Please follow the instructions found at http://www.gnupg.org/download/
or read on:

GnuPG 2.0.2 may be downloaded from one of the GnuPG mirror sites or
direct from ftp://ftp.gnupg.org/gcrypt/ .  The list of mirrors can be
found at http://www.gnupg.org/mirrors.html .  Note, that GnuPG is not
available at ftp.gnu.org.

On the mirrors you should find the following files in the *gnupg*
directory:

  gnupg-2.0.2.tar.bz2 (3.8M)
  gnupg-2.0.2.tar.bz2.sig

      GnuPG source compressed using BZIP2 and OpenPGP signature.

  gnupg-2.0.1-2.0.2.diff.bz2 (53k)

      A patch file to upgrade a 2.0.1 GnuPG source.

Note, that we don't distribute gzip compressed tarballs.  


Checking the Integrity
======================

In order to check that the version of GnuPG which you are going to
install is an original and unmodified one, you can do it in one of
the following ways:

 * If you already have a trusted version of GnuPG installed, you
   can simply check the supplied signature.  For example to check the
   signature of the file gnupg-2.0.2.tar.bz2 you would use this command:

     gpg --verify gnupg-2.0.2.tar.bz2.sig

   This checks whether the signature file matches the source file.
   You should see a message indicating that the signature is good and
   made by that signing key.  Make sure that you have the right key,
   either by checking the fingerprint of that key with other sources
   or by checking that the key has been signed by a trustworthy other
   key.  Note, that you can retrieve the signing key using the command

     finger wk ,at' g10code.com

   or using a keyserver like

     gpg --recv-key 1CE0C630

   The distribution key 1CE0C630 is signed by the well known key
   5B0358A2.  If you get an key expired message, you should retrieve a
   fresh copy as the expiration date might have been prolonged.

   NEVER USE A GNUPG VERSION YOU JUST DOWNLOADED TO CHECK THE
   INTEGRITY OF THE SOURCE - USE AN EXISTING GNUPG INSTALLATION!

 * If you are not able to use an old version of GnuPG, you have to verify
   the SHA-1 checksum.  Assuming you downloaded the file
   gnupg-2.0.2.tar.bz2, you would run the sha1sum command like this:

     sha1sum gnupg-2.0.2.tar.bz2

   and check that the output matches the first line from the
   following list:

1a3165c5b601f3244b8885143d02bea4210495e3  gnupg-2.0.2.tar.bz2
1d42f46ae2c0d00b56be34bcd95fff51b77163a6  gnupg-2.0.1-2.0.2.diff.bz2


What's New
===========

 * Fixed a serious and exploitable bug in processing encrypted
   packages. [CVE-2006-6235].  Note, that a patch was distributed
   along with the first report of that bug.

 * Added --passphrase-repeat to set the number of times GPG will
   prompt for a new passphrase to be repeated.  This is useful to help
   memorize a new passphrase.  The default is 1 repetition.

 * Using a PIN pad does now also work for the signing key.

 * A warning is displayed by gpg-agent if a new passphrase is too
   short.  New option --min-passphrase-len defaults to 8.

 * The status code BEGIN_SIGNING now shows the used hash algorithms.
 

Internationalization
====================

GnuPG comes with support for 27 languages.  Due to a lot of new and
changed strings most translations are not entirely complete.  The
Swedish, Turkish, German and Russian translations should be complete.


Documentation
=============

We are currently working on an installation guide to explain in more
detail how to configure the new features.  As of now the chapters on
gpg-agent and gpgsm include brief information on how to set up the
whole thing.  Please watch the GnuPG website for updates of the
documentation.  In the meantime you may search the GnuPG mailing list
archives or ask on the gnupg-users mailing lists for advise on how to
solve problems.  Many of the new features are around for several years
and thus enough public knowledge is already available.  KDE's KMail is
the most prominent user of GnuPG.  In fact it has been developed along
with the Kmail folks.  Mutt users might want to use the configure
option "--enable-gpgme" and "set use_crypt_gpgme" in ~/.muttrc to make
use of GnuPG-2 to enable S/MIME in addition to a reworked OpenPGP
support.


Support
=======

Improving GnuPG is costly, but you can help!  We are looking for
organizations that find GnuPG useful and wish to contribute back.  You
can contribute by reporting bugs, improve the software, or by donating
money.

Commercial support contracts for GnuPG are available, and they help
finance continued maintenance.  g10 Code GmbH, a Duesseldorf based
company owned and headed by GnuPG's principal author, is currently
funding GnuPG development.  We are always looking for interesting
development projects.

A service directory is available at:

  http://www.gnupg.org/service.html


Thanks
======

We have to thank all the people who helped with this release, be it
testing, coding, translating, suggesting, auditing, administering the
servers, spreading the word or answering questions on the mailing
lists.  


Happy Hacking,

  The GnuPG Team (David, Marcus, Werner and all other contributors)


-- 
Werner Koch                                      <wk на gnupg.org>
The GnuPG Experts                                http://g10code.com
Join the Fellowship and protect your Freedom!    http://www.fsfe.org
----------- следущая часть -----------
Вложение не в текстовом формате было извлечено&hellip;
Имя     : отсутствует
Тип     : application/pgp-signature
Размер  : 196 байтов
Описание: отсутствует
Url     : /pipermail/attachments/20070202/8925fbd8/attachment.pgp 
----------- следущая часть -----------
_______________________________________________
Gnupg-announce mailing list
Gnupg-announce на gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-announce

From marcus.brinkmann на ruhr-uni-bochum.de  Sat Feb  3 16:42:40 2007
From: marcus.brinkmann на ruhr-uni-bochum.de (Marcus Brinkmann)
Date: Sat, 03 Feb 2007 16:42:40 +0100
Subject: [gnupg-ru] [Announce]  GPGME 1.1.3 released
Message-ID: <878xff5jtb.wl%marcus.brinkmann@ruhr-uni-bochum.de>

Hi,

We are pleased to announce version 1.1.3 of GnuPG Made Easy,
a library designed to make access to GnuPG easier for applications.
It may be found in the file (about 897 KB/690 KB compressed)
ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.1.3.tar.gz
ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.1.3.tar.bz2

The following files are also available:
ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.1.3.tar.gz.sig
ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.1.3.tar.bz2.sig
ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.1.2-1.1.3.diff.gz

It should soon appear on the mirrors listed at:
http://www.gnupg.org/mirrors.html

Bug reports and requests for assistance should be sent to:
gnupg-devel на gnupg.org

The sha1sum checksums for this distibution are
bf88701162d09a1bfacf72594fc32f374144158c  gpgme-1.1.2-1.1.3.diff.gz
e416854cb41a2e8b92a148ed17d2f2b97eeeba4a  gpgme-1.1.3.tar.bz2
c41ca6df0b32281135ed95623dd5f8c0789b5671  gpgme-1.1.3.tar.bz2.sig
98ed8563da4870e3dd2d922e96983bf6a3e7cfb1  gpgme-1.1.3.tar.gz
303f46a7dfcf3581d2e6bad984d909e4f9359af1  gpgme-1.1.3.tar.gz.sig

Noteworthy changes in version 1.1.3 (2007-01-29)
------------------------------------------------

 * Fixed a memory leak in gpgme_data_release_and_get_mem.

 * Fixed a bug in Windows command line quoting.

Marcus Brinkmann
mb на g10code.de

--
g10 Code GmbH       http://g10code.com      AmtsGer. Wuppertal HRB 14459
H?ttenstr. 61                               Gesch?ftsf?hrung Werner Koch
D-40699 Erkrath  -=- The GnuPG Experts -=-  USt-Id DE215605608


_______________________________________________
Gnupg-announce mailing list
Gnupg-announce на gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-announce