Re: Phpgroupware security release 0.9.16.016

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

Just a quick upgrade on this :
 - full version has been put in the svn and tagged accordingly.
 - there's a patch available at : http://savannah.gnu.org/patch/?7214
for fixing a problem occurring to address book users due to this
security release. Since I didn't get so much complain about it, I'm
starting to think of closing definitively the 016 branch (at least).
 - this fix will be present in the next release (the 017 one).

>=20
>> The packages are signed with my gpg key. Please check the integrity of
>> yourfiles with the md5sum and check for the official package with my
>> public key.
>>
>=20
> (Hmmm... your email's signature seems invalid after having been
> distributed by the list manager... maybe normal ;-)
Unfortunately yes, the list manager is adding a list signature which
corrupt the message when using the pgp/mime type for a message (I should
use the embedded signature in these cases). I hope this message will be
rightly signed :).


> gpg: MAUVAISE signature de =C2=AB Benoit Hamet (Email Perso) <benoit.ha=
[email protected]> =C2=BB)
>=20
> Anyway... where are these checksums / sigs supposed to be ?

I have added the gpg signature files as a download link on the
download/now section. If you take look on sourceforge, all packages have
their .sig file. as well as a md5sum file for those who didn't have a
reliable network connection.


>=20
> I can't see a link at http://download.phpgroupware.org/now to the check=
sums/sigs (but for the nightly builds) :-/
>=20
> Hope this helps.
Yes thanks :).

Best regards,

Caeies.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkwGMP4ACgkQ6xSX28I47U43bwCfRhd9wdCYgcBgfKxffqaJQVrJ
ntgAniPzD7Dah6o6nAEU7mlvPr/Y8Bpo
=3DFqoN
-----END PGP SIGNATURE-----