gnupg: key validation [LWN.net]

Package(s):

gnupg

CVE #(s):

CAN-2003-0255

Created:

May 16, 2003

Updated:

November 18, 2003

Description:

A key validation bug was discovered in the GNU Privacy Guard (GPG) which would cause keys with more then one user ID to trust all user ID's with the amount of trust given to the most-valid user ID.

Alerts:

SCO Group	CSSA-2003-034.0	2003-11-17
Conectiva	CLA-2003:694	2003-07-11
Yellow Dog	YDU-20030602-4	2003-06-02
Mandrake	MDKSA-2003:061	2003-05-22
Slackware	ssa:2003-141-04	2003-05-22
Red Hat	RHSA-2003:175-01	2003-05-20
Gentoo	200305-04	2003-05-16
OpenPKG	OpenPKG-SA-2003.029	2003-05-16
EnGarde	ESA-20030515-016	2003-05-15

(Log in to post comments)