Re: How to detect patched versus bugged gpg binary

2016-09-06 Thread Karol Babioch
Hi, Am 06.09.2016 um 06:43 schrieb Mike Ingle: > or rely on calling dpkg to ask the version. Yes, I'm afraid that is the only feasible way - at least to my knowledge. You could also check some hashes. However dpkg (AFAIK) does not offer an "--verify" option, so you have to do it for your own. Ap

How to detect patched versus bugged gpg binary

2016-09-05 Thread Mike Ingle
Question about GPG versions: Due to CVE-2016-6313, I put out a new version of Confidant Mail where the Windows and Mac binaries include GPG 1.4.21. I also put in a pop-up dialog to warn if someone uses it with a pre-1.4.21 version of GPG. However, Debian and Tails 2.6rc1 have patched 1.4.18 ins