Slackware 9.0 : GnuPG key validation fix (SSA:2003-141-04)

high Nessus Plugin ID 18713

Synopsis

The remote Slackware host is missing a security update.

Description

A key validation bug which results in all user IDs on a given key being treated with the validity of the most-valid user ID on that key has been fixed with the release of GnuPG 1.2.2. We recommend sites using GnuPG upgrade to this new package.

Solution

Update the affected gnupg package.

See Also

https://lists.gnupg.org/pipermail/gnupg-announce/2003q2/000268.html

http://www.nessus.org/u?eb3d9548

Plugin Details

Severity: High

ID: 18713

File Name: Slackware_SSA_2003-141-04.nasl

Version: 1.17

Type: local

Published: 7/13/2005

Updated: 1/14/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:slackware:slackware_linux:gnupg, cpe:/o:slackware:slackware_linux:9.0

Required KB Items: Host/local_checks_enabled, Host/Slackware/release, Host/Slackware/packages

Patch Publication Date: 5/21/2003

Reference Information

SSA: 2003-141-04