Accepted gnupg 1.4.2.2-1ubuntu2.5 (source)
Ubuntu Installer
archive at ubuntu.com
Thu Mar 8 02:00:25 GMT 2007
Accepted:
OK: gnupg_1.4.2.2-1ubuntu2.5.dsc
-> Component: main Section: utils
OK: gnupg_1.4.2.2-1ubuntu2.5.diff.gz
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 7 Mar 2007 14:13:56 -0800
Source: gnupg
Binary: gnupg gpgv-udeb
Architecture: source
Version: 1.4.2.2-1ubuntu2.5
Distribution: dapper-security
Urgency: low
Maintainer: James Troup <james at nocrew.org>
Changed-By: Kees Cook <kees at ubuntu.com>
Description:
gnupg - GNU privacy guard - a free PGP replacement
gpgv-udeb - minimal signature verification tool
Changes:
gnupg (1.4.2.2-1ubuntu2.5) dapper-security; urgency=low
.
* SECURITY UPDATE: without --status-fd, forged inline sigs can appear valid.
* debian/patches/50_stop_multiple_messages.dpatch: ported upstream patch.
* References
ftp://ftp.gnupg.org/gcrypt/gnupg/patches/gnupg-1.4.6-multiple-message.patch
CVE-2007-1263
Files:
460f793de7cea304ac0e038bf4e8f348 690 utils standard gnupg_1.4.2.2-1ubuntu2.5.dsc
aa78ecc4d9dd51b8d4084e152093e6be 24318 utils standard gnupg_1.4.2.2-1ubuntu2.5.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFF70bWH/9LqRcGPm0RAiQ9AKCKYjUXadePA3wxeR62x47/4rJDlgCbBrv5
lz+f4cko9BNE+ZOw++z2pbg=
=YGET
-----END PGP SIGNATURE-----
More information about the dapper-changes
mailing list