Re: [phpGroupWare-developers] Phpgroupware security release 0.9.16.016

[Benoit Hamet]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

Just a quick upgrade on this :
 - full version has been put in the svn and tagged accordingly.
 - there's a patch available at : http://savannah.gnu.org/patch/?7214
for fixing a problem occurring to address book users due to this
security release. Since I didn't get so much complain about it, I'm
starting to think of closing definitively the 016 branch (at least).
 - this fix will be present in the next release (the 017 one).

> 
>> The packages are signed with my gpg key. Please check the integrity of
>> yourfiles with the md5sum and check for the official package with my
>> public key.
>>
> 
> (Hmmm... your email's signature seems invalid after having been
> distributed by the list manager... maybe normal ;-)
Unfortunately yes, the list manager is adding a list signature which
corrupt the message when using the pgp/mime type for a message (I should
use the embedded signature in these cases). I hope this message will be
rightly signed :).


> gpg: MAUVAISE signature de « Benoit Hamet (Email Perso) <address@hidden> »)
> 
> Anyway... where are these checksums / sigs supposed to be ?

I have added the gpg signature files as a download link on the
download/now section. If you take look on sourceforge, all packages have
their .sig file. as well as a md5sum file for those who didn't have a
reliable network connection.


> 
> I can't see a link at http://download.phpgroupware.org/now to the 
> checksums/sigs (but for the nightly builds) :-/
> 
> Hope this helps.
Yes thanks :).

Best regards,

Caeies.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkwGMP4ACgkQ6xSX28I47U43bwCfRhd9wdCYgcBgfKxffqaJQVrJ
ntgAniPzD7Dah6o6nAEU7mlvPr/Y8Bpo
=FqoN
-----END PGP SIGNATURE-----