Re: Forward gpg-agent to container

2018-06-10 Thread Benjamin Kircher
> On 6. Jun 2018, at 02:27, Phil Pennock wrote: > > On 2018-06-05 at 17:17 -0400, Phil Pennock wrote: >> Shell 2: >> $ docker run -it --rm -v /var/run/pdp.gnupg:/root/.gnupg/S.gpg-agent.ssh >> alpine >> / # chmod 0700 /root/.gnupg && chown root:root /root/.gnupg/S.gpg-agent >> / # apk update

Re: Forward gpg-agent to container

2018-06-10 Thread Benjamin Kircher
> On 10. Jun 2018, at 18:05, Benjamin Kircher > wrote: > > > >> On 6. Jun 2018, at 02:27, Phil Pennock wrote: >> >> On 2018-06-05 at 17:17 -0400, Phil Pennock wrote: >>> Shell 2: >>> $ docker run -it --rm -v /var/run/pdp.gnupg:/root/.gnupg/S.gpg-agent.ssh >>> alpine >>> / # chmod 0700 /r

Re: [Announce] [security fix] GnuPG 2.2.8 released (CVE-2018-12020)

2018-06-10 Thread Juergen Bruckner
Hello Werner, i Use Linux Mint 18.3 with GnuPG 2.1.11; which is the easiest way to Update it to 2.2.8? I'm pretty new to the Linux-World, but as far i know i have NOT included a "own" GnuPG Repo in my Repo-List. best regards Juergen Am 2018-06-08 um 15:40 schrieb Werner Koch: > Hello! > > We

Re: [Announce] [security fix] GnuPG 2.2.8 released (CVE-2018-12020)

2018-06-10 Thread Jean-David Beyer
On 06/10/2018 01:25 PM, Juergen Bruckner wrote: > Hello Werner, > > i Use Linux Mint 18.3 with GnuPG 2.1.11; which is the easiest way to > Update it to 2.2.8? > > > I'm pretty new to the Linux-World, but as far i know i have NOT included > a "own" GnuPG Repo in my Repo-List. > > best regards >

Re: [security fix] GnuPG 2.2.8 released (CVE-2018-12020)

2018-06-10 Thread Ben Finney
Werner Koch writes: > Although GnuPG takes great care to sanitize all diagnostic and status > output, the case at hand was missed but finally found and reported by > Marcus Brinkmann. CVE-2018-12020 was assigned to this bug; GnuPG tracks > it at . Thank you to Marcu

Hard to find alternate source of checksums

2018-06-10 Thread Jeff Martin
For a fresh install of GnuPG, I was following the integrity check directions. I have no prior version for GnuPG. https://gnupg.org/download/integrity_check.html They read "...find the announcement on several other websites and make sure the checksum is consistent." This task is difficult to accom