On Tue, May 19, 2009 at 11:02 PM, MrC <lists-squirrelmail@xxxxxxxxxxx> wrote: > Hello Paul, > > On 5/11/2009 11:48 PM, Paul Lesniewski wrote: >> Greetings, >> > > Thanks to everyone contributing to the SquirrelMail project. > >> The SquirrelMail Team is pleased to announce the release of >> SquirrelMail version 1.4.18. The most notable changes for this >> version are several security fixes, including a couple XSS exploits, a >> session fixation issue, and an obscure but dangerous server-side code >> execution hole. However, this version also includes three new >> languages and more than a few enhancements to things such as the >> filters plugin, the address book system and other things under the >> hood. For more complete details, see the ReleaseNotes and ChangeLog >> files included in this release (they have moved to the doc/ >> directory). We advise all users of SquirrelMail software to upgrade. >> >> The latest release can be downloaded from the SquirrelMail website: >> >> http://squirrelmail.org/download >> >> >> Package md5sums >> =============== >> 2df99afc1bc3b121296af65f52fbc5cc squirrelmail-1.4.18.tar.bz2 >> 5e870d2f5b57b4b0e42497cb0a0fae5e squirrelmail-1.4.18.tar.gz >> b7b87b73797633c8d92d3da95d7e97c9 squirrelmail-1.4.18.zip >> >> Package sha1sums >> ================ >> 18872d8ad72f3415672344318901beb9d4d8a860 squirrelmail-1.4.18.tar.bz2 >> 25be33dec86419f07ab8d5b8d41d0e3eed7d2c52 squirrelmail-1.4.18.tar.gz >> eb600ab91f78dc6dbbfb029c6521b728f0e624f7 squirrelmail-1.4.18.zip > > I see .sig files for the 1.4.18 release. But I'm having trouble verifying: > > $ gpg --verify squirrelmail-1.4.18.tar.bz2.sig > gpg: Signature made Fri May 8 10:25:48 2009 PDT using DSA key ID > C4C511EC > gpg: requesting key C4C511EC from hkp server subkeys.pgp.net > gpgkeys: key 281D3FCFC4C511EC not found on keyserver > gpg: no valid OpenPGP data found. > gpg: Total number processed: 0 > gpg: Can't check signature: public key not found > > Is there a public key available? Or am I doing something nutty? -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2.2 (GNU/Linux) mQGiBEkSiCYRBACSmCyrq03+A2QQD6rpUVNUsGnGlk89WF1Uii6hYUe+zd63mvB5 4LD0o7akWt637z7jjgCxQ8rf1bjSPycS90jw6uX+KINN9EKLG8h8khKxSzDQ2fEe UCiaNUEgDet/aE9f7SC6FdJifP4aNRy7qrcUWVVHzk1jPWVvKHLYG1TckwCgut2X cyKrdmZ/SFHc2Anwlm9Z3SUD/2Uj4A2DhFp44HAN14+UkGMOMAKDnWY6fWSGl1Az FL5KvU+Q7ZpC8bwRCbw2HlwxGkSS8rAJvE7RP6q+Ih77T6M9p2vTzBwpA8pHjDzl 4Jwy1ydwm56ZEnAMoJx9GV7bYnjbxKhGRaU6BAR0IyE7ABH/Lt5607SpbUCGZv8T 1gjpBACQTE8avly9IGn7Ick3A6INzZvLlUbhmKlB/pCSMZ+l31csVa7Obyi9JWep NTQgnn0+kMEuvNcIdU2LygJ/txbATrjJ/8f4xy0JdZeohDcbShzM9rgaPNHplQ2k JS2R4mXMSTOXvh6zsfL6E0LrXA81GLPMvnqv+mJZ8NF5dxLWrbQnUGF1bCBMZXNu aWV3c2tpIDxwYXVsQHNxdWlycmVsbWFpbC5vcmc+iGAEExECACAFAkkSiCYCGwMG CwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAKCRAoHT/PxMUR7CL8AJ9kwKEqJEeoXpZ8 JRNNmuyDY6oZNACgrXmXZiMYBrJIe+GxX//J/k05PdK5Ag0ESRKIPRAIAJ29FHPh OKC8MALUuXBfs5r6i4E7K+nModuthGmiCwMPqOW+W+xCwBTzQY99lfvXxONOJlr4 Vztl4WPr1FAxtvQe/9oC7ywSL9Y5F+Eygdcp2ir1hNsDROSvEna/lRbxVNl4PGvC tiCktV99CnE/aWXCBByw1F88WBwMEHkrNZagYWzx9cKp1+fgqMifTLD7xsCJi33b iTJzSyKOnnwGieqsvAxlq/5rjfjIN8EWVH43hseqomnft8Lu7IdOafZXNBnsIWlY TA0+vlh3aczhAiSdJiMMgGD+vJW0w5HNoxYXaxDu9wZ6BV90yd93Po8mm09USbX+ HIxi/AZg48L5bysAAwYH/3QIz7b+KaL80I17bMbCOWxjO0dV5gBf4RLtE10a2H5W Lq0ptg6Sf88nCJEpWi72TMxrEttAGjJcivN+PoXhQ+UAw5H7wO8cd8ZdK0vzDr5X g1u1HBG0qfIjUnkYI0Y7S5xiET3QLXSWoJZHqTH8g0iUAFLmSSqMZsGDVYzeYfdA s+mUcmyNIMkLNWINytD2pH9BvQ7PNh5fKDdWg+bn93yPVLUnuJU4IQNvuLw8g1Kx 7C66BQQquwD4YyP8weUmVqPJiS2TG4AWKPn8o0thyptn8rRjCYdj2jhwNiRLsMky zAFcZ6wXAkici8zGjpqGaURAkz7FB/W8Uanz6CkXNYiISQQYEQIACQUCSRKIPQIb DAAKCRAoHT/PxMUR7NvlAKCnAMc4h59kdUUk2ANAS73fuwhPQwCeNzP88VVg48IB EDM34VLC5nsok8Y= =yEAw -----END PGP PUBLIC KEY BLOCK----- ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users