|
Gentoo update for gnupg
|
|
Secunia Advisory:
|
SA10418
|
|
|
Release Date:
|
2003-12-12
|
|
Popularity:
|
6,797 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Spoofing
Exposure of sensitive information
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Gentoo Linux 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0971
CVE-2003-0978
|
|
Description:
Gentoo has issued updated packages for gnupg. These fix two vulnerabilities, which may expose the private key when using El-Gamal type 20 keys and allow malicious people to compromise systems using the experimental HKP interface.
For more information:
SA10348
SA10304
Solution:
Install updated packages.
emerge sync
emerge -pv '>=app-crypt/gnupg-1.2.3-r5'
emerge '>=app-crypt/gnupg-1.2.3-r5'
emerge clean
Other References:
SA10348:
http://secunia.com/advisories/10348/
SA10304:
http://secunia.com/advisories/10304/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
