Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Slackware 14.1: 2015-111-02 Critical: GnuPG Security Fix

slackware
Calendar Grey April 22, 2015
Scroller Slackware
gnupg solutions for Slackware tackle vulnerabilities and incorporate essential upgrades to bolster information security.
New gnupg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/gnupg-1.4.19-i486-1_slack14.1.txz: Upgraded. * Use ciphertext blinding for Elgamal decryption [CVE-2014-3591]. See for details. * Fixed data-dependent timing variations in modular exponentiation [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks are Practical]. For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-3591 https://www.cve.org/CVERecord?id=CVE-2015-0837 (* Security fix *)

Topics%20covered

Topics Covered

security advisory data protection critical fix slackware gnupg update

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 13.0 package: 2d9fc7d886da7d3e6094c3dccc2f8877 gnupg-1.4.19-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: ba87cb6dc811422ca0cbb7fc8b66012b gnupg-1.4.19-x86_64-1_slack13.0.txz
Slackware 13.1 package: a310d794eaf90c537f2411368afda9c1 gnupg-1.4.19-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: e936db5ea7d15d08aa2a83ee5c04162c gnupg-1.4.19-x86_64-1_slack13.1.txz
Slackware 13.37 package: c3a95ca8d904f89f946bd9b9c834ec03 gnupg-1.4.19-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: feda87813d35b1fa2db6a5a278e67ba6 gnupg-1.4.19-x86_64-1_slack13.37.txz
Slackware 14.0 package: 3ac196295507fcd34822696e976cc90f gnupg-1.4.19-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 704f09a210b25059169bf3a1080b24c4 gnupg-1.4.19-x86_64-1_slack14.0.txz
Slackware 14.1 package: 61ec6c81ef765bf4c935bea09f1ca07b gnupg-1.4.19-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 6dd521c98f39cbebe0d4bac82d8a3eca gnupg-1.4.19-x86_64-1_slack14.1.txz
Slackware -current package: af5d261c4079cd3c1da9e0377208198c n/gnupg-1.4.19-i486-1.txz
Slackware x86_64 -current package: 4639457dbe54e469c9c220d1353038e7 n/gnupg-1.4.19-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory data protection critical fix slackware gnupg update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg gnupg-1.4.19-i486-1_slack14.1.txz