Slackware Advisory SSA:2003-141-04 GnuPG key validation fix

  1. Network Vulnerabilities
  2. Slackware Local Security Checks
  3. Slackware Advisory SSA:2003-141-04 GnuPG key validation fix
Summary
The remote host is missing an update as announced via advisory SSA:2003-141-04.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=SSA:2003-141-04
Insight
A key validation bug which results in all user IDs on a given key being treated with the validity of the most-valid user ID on that key has been fixed with the release of GnuPG 1.2.2. We recommend sites using GnuPG upgrade to this new package. For detailed information about the problem, see this page: http://lists.gnupg.org/pipermail/gnupg-announce/2003q2/000268.html
Severity
Medium Severity
Classification
Related Vulnerabilities