Ubuntu

“gnupg2” 2.0.17-2ubuntu2.12.04.3 source package in Ubuntu

Changelog

gnupg2 (2.0.17-2ubuntu2.12.04.3) precise-security; urgency=low

  * SECURITY UPDATE: incorrect no-usage-permitted flag handling
    - debian/patches/CVE-2013-4351.patch: correctly handle empty key flags
      in g10/getkey.c, g10/keygen.c, include/cipher.h.
    - CVE-2013-4351
  * SECURITY UPDATE: denial of service via infinite recursion
    - debian/patches/CVE-2013-4402.patch: set limits on number of filters
      and nested packets in common/iobuf.c, g10/mainproc.c.
    - CVE-2013-4402
 -- Marc Deslauriers <email address hidden>   Mon, 07 Oct 2013 15:51:48 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2013-10-07
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
any
Section:
utils
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates on 2013-10-09 main utils
Precise security on 2013-10-09 main utils

Downloads

File Size MD5 Checksum
gnupg2_2.0.17.orig.tar.bz2 3.8 MiB 123af099740fd159c73a0352a274ec81
gnupg2_2.0.17-2ubuntu2.12.04.3.debian.tar.bz2 48.8 KiB 1e20869a41ae3e9bcb8e07db3eaedfd0
gnupg2_2.0.17-2ubuntu2.12.04.3.dsc 2.3 KiB 9d59e361fe7095b2a9f0871af3ff83cd

Binary packages built by this source

gnupg-agent: GNU privacy guard - password agent

 GnuPG is GNU's tool for secure communication and data storage.
 It can be used to encrypt data and to create digital signatures.
 It includes an advanced key management facility and is compliant
 with the proposed OpenPGP Internet standard as described in RFC2440.
 .
 This package contains the agent program gpg-agent which keeps a
 temporary secure storage of your passphrases.

gnupg2: GNU privacy guard - a free PGP replacement (new v2.x)

 GnuPG is GNU's tool for secure communication and data storage.
 It can be used to encrypt data and to create digital signatures.
 It includes an advanced key management facility and is compliant
 with the proposed OpenPGP Internet standard as described in RFC2440.
 .
 GnuPG 2.x is the new modularized version of GnuPG supporting OpenPGP
 and S/MIME.
 .
 GnuPG does not use any patented algorithms so it cannot be compatible
 with PGP2 because it uses IDEA (which is patented worldwide).

gpgsm: GNU privacy guard - S/MIME version

 GnuPG is GNU's tool for secure communication and data storage.
 It can be used to encrypt data and to create digital signatures.
 It includes an advanced key management facility and is compliant
 with the proposed OpenPGP Internet standard as described in RFC2440.
 .
 This package contains the gpgsm program. gpgsm is a tool to provide
 digital encryption and signing services on X.509 certificates and the
 CMS protocol. gpgsm includes complete certificate management.