|
GnuPG ElGamal Signing Key Private Key Compromise Vulnerability
Solution: Debian has released an updated advisory (DSA 429-2) and fixes to address this issue. Please see the referenced advisory for links to fixed packages. Red Hat has released an advisory (RHSA-2003:390-01) that includes fixes for this issue. Please see the attached advisory for details on obtaining and applying fixes. Conectiva has released an advisory that includes fixes for this issue. Mandrake has released an advisory and fixes for this issue. SuSE has released an advisory (SuSE-SA:2003:048) that includes fixes for this issue. Please see the attached advisory for details on obtaining and applying fixes. The vendor has released a patch for this issue that can be applied to version 1.2.3. This fix will also be included in the next version. Gentoo has released an advisory (200312-05) to address this issue. All Gentoo Linux systems should be updated to use gnupg-1.2.3-r5 or higher as follows: emerge sync emerge -pv '>=app-crypt/gnupg-1.2.3-r5' emerge '>=app-crypt/gnupg-1.2.3-r5' emerge clean TurboLinux has released advisory TLSA-2003-68 and fixes to address this issue. SGI advisory 20031203-01-U has been released to address this issue. Debian has released an advisory (DSA 429-1) and fixes to address this issue. Please see the referenced advisory for links to fixed packages. SGI has released an advisory 20040202-01-U to address this and other issues in SGI ProPack 2.4. Please see the referenced advisory for more information. SCO has released advisory CSSA-2004-009.0 to address this issue. Fixes are available below: RedHat gnupg-1.0.7-6.i386.rpm
RedHat gnupg-1.2.1-3.i386.rpm
RedHat gnupg-1.0.6-3.ia64.rpm
RedHat gnupg-1.0.6-3.i386.rpm
RedHat gnupg-1.0.4-11.i386.rpm
RedHat gnupg-1.0.6-5.i386.rpm
GNU GNU Privacy Guard 1.0.7
GNU GNU Privacy Guard 1.2.2
GNU GNU Privacy Guard 1.2.2 -rc1
GNU GNU Privacy Guard 1.2.3
SGI ProPack 2.4
|
|
|
Privacy Statement |
