[Announce] [security fix] GnuPG 1.4.15 released

[mirimir]

On 10/06/2013 02:21 AM, Daniel Kahn Gillmor wrote:

> On 10/05/2013 10:09 PM, mirimir wrote:
>> On 10/05/2013 08:56 AM, Werner Koch wrote:
>>
>>> We are pleased to announce the availability of a new stable GnuPG-1
>>> release: Version 1.4.15.  This is a *security fix* release and all users
>>> are advised to updated to this version.  See below for the impact of the
>>> problem.
>>
>> I'm using Thunderbird with Enigmail. Enigmail is at 1.5.2
>> (20130913-2148) and gpg is at 1.4.11. Is it best to wait for Enigmail to
>> update, or to update gpg manually?
> 
> My understanding is that enigmail does not update gpg on its own.  The
> version number of enigmail is not tied to the version number of gpg at all.
> 
> You should update gpg manually.
> 
> hth,
> 
> 	--dkg

Thank you.

I see at https://www.enigmail.net/documentation/quickstart-ch1.php that
GnuPG 2.0 is apparently recommended (at least for Windows).

Is upgrading to gpg 2.0.22 recommended vs 1.4.15?