Accepted gnupg 1.4.3-2ubuntu3.3 (source)
Ubuntu Installer
archive at ubuntu.com
Thu Mar 8 02:00:45 GMT 2007
Accepted:
OK: gnupg_1.4.3-2ubuntu3.3.dsc
-> Component: main Section: utils
OK: gnupg_1.4.3-2ubuntu3.3.diff.gz
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 7 Mar 2007 14:10:02 -0800
Source: gnupg
Binary: gnupg-udeb gnupg gpgv-udeb
Architecture: source
Version: 1.4.3-2ubuntu3.3
Distribution: edgy-security
Urgency: low
Maintainer: James Troup <james at nocrew.org>
Changed-By: Kees Cook <kees at ubuntu.com>
Description:
gnupg - GNU privacy guard - a free PGP replacement
gnupg-udeb - GNU privacy guard - a free PGP replacement
gpgv-udeb - minimal signature verification tool
Changes:
gnupg (1.4.3-2ubuntu3.3) edgy-security; urgency=low
.
* SECURITY UPDATE: without --status-fd, forged inline sigs can appear valid.
* debian/patches/50_stop_multiple_messages.dpatch: ported upstream patch.
* References
ftp://ftp.gnupg.org/gcrypt/gnupg/patches/gnupg-1.4.6-multiple-message.patch
CVE-2007-1263
Files:
54eb12ebf5f4426abe78eb286c32ec35 697 utils standard gnupg_1.4.3-2ubuntu3.3.dsc
2f3b7d22a447212c871a1ca6ff754df7 29804 utils standard gnupg_1.4.3-2ubuntu3.3.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFF70bWH/9LqRcGPm0RAvIiAJsEfN5CNMAw4kloIjNK+W4skMkGBwCfQnt3
0vUdAsgMUI41OIGMUd/8uqA=
=ANSG
-----END PGP SIGNATURE-----
More information about the edgy-changes
mailing list