Accepted gnupg 1.4.2.2-1ubuntu2.5 (source)

Ubuntu Installer archive at ubuntu.com
Thu Mar 8 02:00:25 GMT 2007


Accepted:
 OK: gnupg_1.4.2.2-1ubuntu2.5.dsc
     -> Component: main Section: utils
 OK: gnupg_1.4.2.2-1ubuntu2.5.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed,  7 Mar 2007 14:13:56 -0800
Source: gnupg
Binary: gnupg gpgv-udeb
Architecture: source
Version: 1.4.2.2-1ubuntu2.5
Distribution: dapper-security
Urgency: low
Maintainer: James Troup <james at nocrew.org>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 gnupg      - GNU privacy guard - a free PGP replacement
 gpgv-udeb  - minimal signature verification tool
Changes: 
 gnupg (1.4.2.2-1ubuntu2.5) dapper-security; urgency=low
 .
   * SECURITY UPDATE: without --status-fd, forged inline sigs can appear valid.
   * debian/patches/50_stop_multiple_messages.dpatch: ported upstream patch.
   * References
     ftp://ftp.gnupg.org/gcrypt/gnupg/patches/gnupg-1.4.6-multiple-message.patch
     CVE-2007-1263
Files: 
 460f793de7cea304ac0e038bf4e8f348 690 utils standard gnupg_1.4.2.2-1ubuntu2.5.dsc
 aa78ecc4d9dd51b8d4084e152093e6be 24318 utils standard gnupg_1.4.2.2-1ubuntu2.5.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFF70bWH/9LqRcGPm0RAiQ9AKCKYjUXadePA3wxeR62x47/4rJDlgCbBrv5
lz+f4cko9BNE+ZOw++z2pbg=
=YGET
-----END PGP SIGNATURE-----





More information about the dapper-changes mailing list