Hi! We are pleased to announce the availibility of Gpg4win, version 1.0.3. * This version contains security fixes for the GnuPG and Sylpheed-Claws components. *Updating to this version is strongly recommended*. * Please also make sure to subscribe to the new gpg4win announcement mailing list. We might stop in the future to cross post announcements to the general GnuPG annoucement list. See: http://lists.wald.intevation.org/mailman/listinfo/gpg4win-announce About Gpg4win ------------- The Gpg4win project aims at updating the Gpg4win Windows installation package with GnuPG encryption tool, associated applications and documentation on a regular basis. Especially the documentation (handbooks "Einsteiger" and "Durchblicker") are directly maintained as part of the gpg4win project. It is an international project. Due to the origin of the project the German language is fully supported. As of now the the handbooks are only available in German. People helping with translations are very welcome! The main difference compared to all other similar approaches (mainly GnuPP, GnuPT, Windows Privacy Tools and GnuPG-Basics) is that the first thing developed was the *gpg4win-Builder*. This builder allows to easily create new gpg4win.exe installers with updated components. The builder runs on any decent Unix system, preferable Debian GNU/Linux. Almost all products are automatically cross-compiled for integration into the installer. With this concept it is hoped to *prevent quick aging of the* *installer package*. This is due to easier updating and less dependancy on single developers. Noteworthy changes in version 1.0.3 (2006-06-26) ------------------------------------------------ * Fixed a security related bug in GnuPG (CVE-2006-3082). * Updated Sylpheed-Claws due to security problems. * Included components are: GnuPG: 1.4.4 [*] WinPT: 0.12.3 [*] GPA: 0.7.3 GPGol: 0.9.10 GPGee: 1.3.1 Sylpheed-Claws: 2.3.1 [*] Einsteiger: 2.0.2 Durchblicker: 2.0.2 (Marked packages are updated since the last release) Installation ------------ For installation instructions, please visit http://www.gpg4win.org or read on. Developers who want to *build an installer* need to get the following files from http://wald.intevation.org/projects/gpg4win/ : gpg4win-1.0.3.tar.bz2 (3.9M) gpg4win-1.0.3.tar.bz2.sig The second file is a digital signature of the the first file. Either check that this signature is fine or compare with the checksums given below. (see also http://www.gnupg.org/download/integrity_check.html) The *ready to use installer* is available at: http://ftp.gpg4win.org/gpg4win-1.0.3.exe (6.2M) http://ftp.gpg4win.org/gpg4win-1.0.3.exe.sig Or using the ftp protocol at: ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.0.3.exe (6.2M) ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.0.3.exe.sig SHA1 and MD5 checksums for these files are given below. If you don't need the German PDF manuals, you might alternatively download the "light" version of the installer: http://ftp.gpg4win.org/gpg4win-light-1.0.3.exe (4.6M) http://ftp.gpg4win.org/gpg4win-light-1.0.3.exe.sig or using the ftp protocol at: ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.0.3.exe (4.6M) ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.0.3.exe.sig A separate installer with the the sources used to build the above installer is available at: ftp://ftp.gpg4win.org/gpg4win/gpg4win-src-1.0.3.exe (41M) ftp://ftp.gpg4win.org/gpg4win/gpg4win-src-1.0.3.exe.sig Most people don't need this source installer; it is merely stored on that server to satisfy the conditions of the GPL. In general it is better to get the gpg4win builder tarball (see above) and follow the instructions in the README to build new installers; building the installer is not possible on Windows machines and works best on current Debian GNU/Linux systems (we use the mingw32 package from Sid). SHA1 checksums are: fb010c9d4ee9e4d51b2b43034562f39eb6b88cbf gpg4win-1.0.3.exe bdb1065aaa8f72fcd13158712f2b479586d3d677 gpg4win-light-1.0.3.exe fa5e30e95227edda40f53dfc424239de06f0980a gpg4win-src-1.0.3.exe 7f0877dbde8e20e0b50288fefe4f77f1574bc50b gpg4win-1.0.3.tar.bz2 MD5 checksums are: 543343e59df88354627e018e0d3052ce gpg4win-1.0.3.exe c5ea9009beb27e16f955cc83ca5573ef gpg4win-light-1.0.3.exe 0d247c343c5623cb459b5debdadd30f7 gpg4win-src-1.0.3.exe 6ed1496b1edacfc7d7416e4155e3fe9e gpg4win-1.0.3.tar.bz2 We like to thank the authors of the included packages, the NSIS authors, all other contributors and first of all, those folks who stayed with us and tested the early releases of gpg4win. Happy hacking, Jan, Marcus, Timo and Werner -- Werner Koch <wk@gnupg.org> The GnuPG Experts http://g10code.com Join the Fellowship and protect your Freedom! http://www.fsfe.org