Accepted gnupg 1.4.6-1ubuntu2 (source)
Kees Cook
kees at ubuntu.com
Wed Mar 7 22:16:39 GMT 2007
Accepted:
OK: gnupg_1.4.6-1ubuntu2.dsc
-> Component: main Section: utils
OK: gnupg_1.4.6-1ubuntu2.diff.gz
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 7 Mar 2007 11:53:20 -0800
Source: gnupg
Binary: gnupg-udeb gpgv gnupg gpgv-udeb
Architecture: source
Version: 1.4.6-1ubuntu2
Distribution: feisty
Urgency: low
Maintainer: James Troup <james at nocrew.org>
Changed-By: Kees Cook <kees at ubuntu.com>
Description:
gnupg - GNU privacy guard - a free PGP replacement
gnupg-udeb - GNU privacy guard - a free PGP replacement
gpgv - GNU privacy guard - signature verification tool
gpgv-udeb - minimal signature verification tool
Changes:
gnupg (1.4.6-1ubuntu2) feisty; urgency=low
.
* SECURITY UPDATE: without --status-fd, forged inline sigs can appear valid.
* debian/patches/50_stop_multiple_messages.dpatch: upstream patch.
* References
ftp://ftp.gnupg.org/gcrypt/gnupg/patches/gnupg-1.4.6-multiple-message.patch
CVE-2007-1263
Files:
5656d71ad87e645ac47e077befdcfeaa 699 utils standard gnupg_1.4.6-1ubuntu2.dsc
5325583f41afd7341f1f8352229b3480 26571 utils standard gnupg_1.4.6-1ubuntu2.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFF7zhkH/9LqRcGPm0RAnehAKCeM0fwyTRjdF3vIETLx6T1/ArTuQCgjzM0
bobMuyODhZF6KXCsVugR4Xc=
=m2OL
-----END PGP SIGNATURE-----
More information about the feisty-changes
mailing list