bug#380: marked as done (gnupg version has security hole; easy to upgrade)
[email protected] (LNX-BBC bug Tracking System) Wed, 21 May 2003 07:55:01 -0700
| Newsgroups | gmane.linux.bbc.bugs,gmane.linux.bbc.devel |
|---|---|
| Message-ID | <[email protected]> |
Your message dated Wed, 21 May 2003 07:53:37 -0700 with message-id <[email protected]> and subject line Bug modified from CVS checkin has caused the attached bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Nick Moffitt (administrator, LNX-BBC bugs database) -------------------------------------- Received: (at submit) by bugs.lnx-bbc.org; 21 May 2003 04:12:39 +0000 >From [email protected] Tue May 20 21:12:39 2003 Received: from [63.149.73.20] (helo=vorpal.notabug.com ident=qmailr) by gargoyle.lnx-bbc.org with smtp (Exim 3.35 #1 (Debian)) id 19IKxy-000243-00 for <[email protected]>; Tue, 20 May 2003 21:12:39 -0700 Received: (qmail 18703 invoked from network); 21 May 2003 04:15:44 -0000 Received: from 12-207-74-63.client.attbi.com (HELO aaronsw.com) (12.207.74.63) by 0 with SMTP; 21 May 2003 04:15:44 -0000 Date: Tue, 20 May 2003 23:15:44 -0500 Mime-Version: 1.0 (Apple Message framework v552) Content-Type: text/plain; charset=US-ASCII; format=flowed Subject: gnupg version has security hole; easy to upgrade From: Aaron Swartz <[email protected]> To: [email protected] Content-Transfer-Encoding: 7bit Message-Id: <[email protected]> X-Mailer: Apple Mail (2.552) Package: gnupg The version of gnupg listed in CVS has a recently-discovered security hole. Upgrading it to the latest version (which doesn't have the security hole) is easy: In Makefile let: GARVERSION = 1.2.2 and in checksums: 01cf9c6b949603d0511f6fc07bc758d2 download/gnupg-1.2.2.tar.gz When I tested these modifications on my machine, things built and tested fine. - Aaron Swartz <http://www.aaronsw.com/> --------------------------------------- Received: (at 380-done) by bugs.lnx-bbc.org; 21 May 2003 14:53:37 +0000 >From [email protected] Wed May 21 07:53:37 2003 Received: from dave by gargoyle.lnx-bbc.org with local (Exim 3.35 #1 (Debian)) id 19IUyH-0000T1-00 for <[email protected]>; Wed, 21 May 2003 07:53:37 -0700 To: [email protected] Subject: Bug modified from CVS checkin Message-Id: <[email protected]> From: Dave Barry <[email protected]> Date: Wed, 21 May 2003 07:53:37 -0700 Closes: 380 NUV from Aaron Swartz