Re: [ESD-translators] More security updates

[Thérèse Godefroy]

Le 18/06/2018 à 16:44, Molly de Blanc a écrit :
> There were new flaws discovered in enigmail and GPG, which you can read
> about:
> 
> https://thehackernews.com/2018/06/gnupg-encryption-signature.html?m=1.
> 
> I've updated the ESD, informing users to install the most up-to-date
> verions of GPG, GPGTools, and Enigmail. These updates are in the
> GNU/Linux, Mac, and Windows versions.
> 
> Cheers,
> Molly
> 
> 

Hello Molly,

There are several issues with the update:

- The note about GnuPG, GPGTools and Enigmail follows a paragraph that
says: "If you already have an email program, you can skip to Step 1.b."
So, people who have an email program are likely to skip the note. In any
case, GPGTools isn't defined yet. Why not move the note to step 1.b?

- Windows users know nothing about GPGTools. What they install is
Gpg4win. The patched version is 3.1.2:
https://www.gpg4win.org/change-history.html

- GnuPG 2.2.8 is not available in the "stable" and "testing" Debian
repos. You'd need to install sid (unstable) to get it. Trisquel 7 and 8
are out.

Best,
Thérèse