Packages
Details
It was discovered that GnuPG used a short ID when downloading keys from a
keyserver, even if a long ID was requested. An attacker could possibly use
this to return a different key with a duplicate short key id.
It was discovered that GnuPG used a short ID when downloading keys from a
keyserver, even if a long ID was requested. An attacker could possibly use
this to return a different key with a duplicate short key id.
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 8.04 hardy | gnupg2 – 2.0.7-1ubuntu0.2 | ||
| gnupg – 1.4.6-2ubuntu5.1 | |||
| 12.04 precise | gnupg2 – 2.0.17-2ubuntu2.12.04.1 | ||
| gnupg – 1.4.11-3ubuntu2.1 | |||
| 11.10 oneiric | gnupg2 – 2.0.17-2ubuntu2.11.10.1 | ||
| gnupg – 1.4.11-3ubuntu1.11.10.1 | |||
| 11.04 natty | gnupg2 – 2.0.14-2ubuntu1.2 | ||
| gnupg – 1.4.11-3ubuntu1.11.04.1 | |||
| 10.04 lucid | gnupg2 – 2.0.14-1ubuntu1.4 | ||
| gnupg – 1.4.10-2ubuntu1.1 | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.