Re: Error Installing gnupg-2.0.27 on Debian Squeeze

2015-03-22 Thread Stephan Beck
Hi Angel,

I cannot reproduce the error and I don't know which documentation you exactly
refer to, but using Debian Squeeze (oldstable) you need the gnupg and libgcrypt
oldstable versions that are adequate for you.
I'd use the package manager (apt) for installing it.

Here's what I found (1):
gnupg 2.0.14-2+squeeze2
libgcrypt 1.4.5-2+squeeze1

(1) https://packages.debian.org

Hope that helps

Stephan



Am 21.03.2015 um 18:16 schrieb Angel Parrales:
> Following instructions included in documentation, is not possible to
> complete installation,
> Last lines pasted below:
> 
> make[3]: Entering directory
> `/home/adolfo/Downloads/gnupg-2.0.27/tests/openpgp'
> echo '#!/bin/sh' >./gpg_dearmor
> echo "../../g10/gpg2 --homedir . --no-options --no-greeting \
>  --no-secmem-warning --batch --dearmor" >>./gpg_dearmor
> chmod 755 ./gpg_dearmor
> ./gpg_dearmor > ./pubring.gpg < ./pubring.asc
> ../../g10/gpg2: error while loading shared libraries: libgcrypt.so.20:
> cannot open shared object file: No such file or directory
> make[3]: *** [pubring.gpg] Error 127
> make[3]: Leaving directory
> `/home/adolfo/Downloads/gnupg-2.0.27/tests/openpgp'
> make[2]: *** [all-recursive] Error 1
> make[2]: Leaving directory `/home/adolfo/Downloads/gnupg-2.0.27/tests'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/home/adolfo/Downloads/gnupg-2.0.27'
> make: *** [all] Error 2
> 
> Your help is highly appreciated.
> 
> Thanks and Regards,
> -- Angel Parrales
> 
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
> 






signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Error Installing gnupg-2.0.27 on Debian Squeeze

2015-03-22 Thread Daniel Kahn Gillmor
Hi Angel--

On Sat 2015-03-21 12:16:08 -0500, Angel Parrales wrote:
> Following instructions included in documentation, is not possible to
> complete installation,
> Last lines pasted below:
>
> make[3]: Entering directory
> `/home/adolfo/Downloads/gnupg-2.0.27/tests/openpgp'
> echo '#!/bin/sh' >./gpg_dearmor
> echo "../../g10/gpg2 --homedir . --no-options --no-greeting \
>  --no-secmem-warning --batch --dearmor" >>./gpg_dearmor
> chmod 755 ./gpg_dearmor
> ./gpg_dearmor > ./pubring.gpg < ./pubring.asc
> ../../g10/gpg2: error while loading shared libraries: libgcrypt.so.20:
> cannot open shared object file: No such file or directory
> make[3]: *** [pubring.gpg] Error 127
> make[3]: Leaving directory
> `/home/adolfo/Downloads/gnupg-2.0.27/tests/openpgp'
> make[2]: *** [all-recursive] Error 1
> make[2]: Leaving directory `/home/adolfo/Downloads/gnupg-2.0.27/tests'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/home/adolfo/Downloads/gnupg-2.0.27'
> make: *** [all] Error 2

it's looking for libgcrypt20, which is not available in squeeze.  Maybe
you've tried to build it pointing at the wrong libgcrypt?  squeeze
only has libgcrypt11, version 1.4.5.

what is the output of:

  dpkg -l 'libgcrypt*

It should show you a -dev package and a regular non-dev package as well,
most likely of libgcrypt11.

You'll either need to backport a new libgcrypt, or to point the compiler
(during ./configure time?)  toward the right libgcrypt-dev variant.

--dkg

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Clarification on advisories

2015-03-22 Thread Sevan / Venture37
Hi,
In the 1.4.19 announcement, the entry: "Fixed bugs related to bogus
keyrings." is the fix for CVE-2015-1606?
https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html

The following commit appears to be present in 1.4.19
http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=f0f71a721ccd7ab9e40b8b6b028b59632c0cc648

Am I right in thinking the issues found through fuzzing which led to
the release of 2.1.2 still have not be back ported to previous
releases? certainly most of the changes in the commits highlighted are
applicable accounting for the change of line numbers.

Regards


Sevan / Venture37

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users