[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 53-1] gnupg security update

Package        : gnupg
Version        : 1.4.10-4+squeeze6
CVE ID         : CVE-2014-5270

Genkin, Pipman and Tromer discovered a side-channel attack on Elgamal
encryption subkeys (CVE-2014-5270).

In addition, this update hardens GnuPG's behaviour when treating keyserver
responses; GnuPG now filters keyserver responses to only accepts those
keyids actually requested by the user.

Attachment: signature.asc
Description: Digital signature

Reply to: