Slackware 9.0: SSA:2003-141-04 Moderate: GnuPG Key Validation Fix

slackware

May 22, 2003

A key validation bug which results in all user IDs on a given key being treated with the validity of the most-valid user ID on that key has been fixed with the release of GnuPG 1.2...

Summary

Here are the details from the Slackware 9.0 ChangeLog: Tue May 20 20:13:09 PDT 2003 patches/packages/gnupg-1.2.2-i386-1.tgz: Upgraded to gnupg-1.2.2, which fixes a bug in key validation for keys with more than one user ID. The bug results in all user IDs on a given key being treated with the validity of the most-valid user ID on that key. (* Security fix *) WHERE TO FIND THE NEW PACKAGES: Updated package for Slackware 9.0: MD5 SIGNATURES: Slackware 9.0 package: 1b2b07c29cbba7aacfb46635f11f2d76 gnupg-1.2.2-i386-1.tgz INSTALLATION INSTRUCTIONS: Upgrade using upgradepkg (as root): upgradepkg gnupg-1.2.2-i386-1.tgz Slackware Linux Security Team slackware security@slackware.com