Red Hat Linux 7.0 RHSA-2003:390-01 Critical GnuPG Key Risk

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.

Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL Certificate Errors, you need to install a version of the up2date client with an updated certificate. The latest version of up2date is available from the Red Hat FTP site and may also be downloaded directly from the RHN website:

5. RPMs required:

Red Hat Linux 7.1:

SRPMS:

i386:

Red Hat Linux 7.2:

SRPMS:

i386:

ia64:

Red Hat Linux 7.3:

SRPMS:

i386:

Red Hat Linux 8.0:

SRPMS:

i386:

Red Hat Linux 9:

SRPMS:

i386:

6. Verification:

MD5 sum Package Name 4d62554490e85b7cc1f0cfef6518a979 7.1/en/os/SRPMS/gnupg-1.0.7-12.src.rpm 0591a2079aff5e7979b0225b568bceaa 7.1/en/os/i386/gnupg-1.0.7-12.i386.rpm b619c30c293094d7dcd18487d8e62a43 7.2/en/os/SRPMS/gnupg-1.0.7-13.src.rpm e7e3e75afd1ccd2267ccc7847c76ebb4 7.2/en/os/i386/gnupg-1.0.7-13.i386.rpm 6fb21011ca42ff395b8cfc7dce4c2936 7.2/en/os/ia64/gnupg-1.0.7-13.ia64.rpm b619c30c293094d7dcd18487d8e62a43 7.3/en/os/SRPMS/gnupg-1.0.7-13.src.rpm e7e3e75afd1ccd2267ccc7847c76ebb4 7.3/en/os/i386/gnupg-1.0.7-13.i386.rpm bc375882f13e5c10eb29eb3615de911d 8.0/en/os/SRPMS/gnupg-1.0.7-14.src.rpm a3de0844778cd994258f121330ff6d62 8.0/en/os/i386/gnupg-1.0.7-14.i386.rpm e1f31f4a07ebb5b4040f8f6ca3816cc4 9/en/os/SRPMS/gnupg-1.2.1-9.src.rpm 604a2fb5b809ec99280871f46507f4a1 9/en/os/i386/gnupg-1.2.1-9.i386.rpm

These packages are GPG signed by Red Hat for security. Our key is available from https://access.redhat.com/security/team/key

You can verify each package with the following command:

rpm --checksig -v

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command:

md5sum