selfcustody/krux-installer v0.0.1-alpha-6

Krux-Installer v0.0.1-alpha-6

on GitHub

What's Changed

• Updated from Urgent Security Issue by @qlrd in #29

Critical WebP bug: many apps, not just browsers, under threat.

The heap buffer overflow (CVE-2023-4863) vulnerability in the WebP Codec is being actively exploited in the wild.

Full Changelog: v0.0.1-alpha-5...v0.0.1-alpha-6

Verify integrity/authenticity

The process can change depending of used OS; lets call a general `

Integrity

Download the properly <binary>.sha256.txt:

wget https://github.com/selfcustody/krux-installer/releases/download/v0.0.1-alpha-6/<binary>.sha256.txt

Check sum:

sha256sum --check <binary>.sha256.txt <binary>

Signature

Import the public pgp key:

gpg --keyserver hkps://keys.openpgp.org --recv-keys "B428 1DDD FBBD 207B FA41 1313 8974 C902 9932 6322"

Download signature:

wget https://github.com/selfcustody/krux-installer/releases/download/v0.0.1-alpha-6/<binary>.sig

Verify:

gpg --verify <binary>.sig <binary>