Trustix Security Advisory - gnupg, ftpd-BSD

Date: Wed, 20 Dec 2000 14:53:45 +0100
From: Trustix Secure Linux Team tsl@TRUSTIX.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Subject: Trustix Security Advisory - gnupg, ftpd-BSD

Hi

Today we updated gnupg and ftpd-BSD. All versions of Trustix Secure Linux are affected.

gnupg:
This update stops gnupg from importing private keys unless this has been explicitly enabled, as this will corrupt the users web of trust. It also clears up the problem with gnupg ignoring detached signatures if the file being checked contains clearsigned data.

ftpd-BSD:
This contains a revised version of the replydirname() patch, as the first version we released contained a typo making the ftpd behave erratically. Thanks to Janåke Rönnblom for pointing this out.

MD5sums:
For version 1.2:
0f8d2d383aa63a187611f24610f6737b  RPMS/gnupg-1.0.4-4tr.i586.rpm
d20c0dd62b2562ab6b95c7f3bf06f7aa  SRPMS/gnupg-1.0.4-4tr.src.rpm
f3c02c5cddde1fbf5c9abb5238b15d5e  RPMS/ftpd-BSD-0.3.2-5tr.i586.rpm
33c71e68126a9b0aa0a333fa76d1e30c  SRPMS/ftpd-BSD-0.3.2-5tr.src.rpm

For version 1.1 and 1.0x:
4f8e7a238f268eb36ef535f7280b49bb  RPMS/gnupg-1.0.4-4tr.i586.rpm
cda6ef46d7a7a54d301ebbeb47abef95  SRPMS/gnupg-1.0.4-4tr.src.rpm
55123bc226b8a22ebae6c82782c5a2cb  RPMS/ftpd-BSD-0.3.2-5tr.i586.rpm
c8df7b5a9e6326dbc85853f80f3cf172  SRPMS/ftpd-BSD-0.3.2-5tr.src.rpm

Users of 1.0x should as always use the update for 1.1.

Questions? Problems? Try our mailinglists: <URL:http://www.trustix.net/support/>

--
Trustix Security Maintainance Agency