GnuPG Incorrect Non-Detached Signature Verification Vulnerability

GnuPG Incorrect Non-Detached Signature Verification Vulnerability

Solution:
The vendor has released version 1.4.2.2 to address this issue.

Please see the references for more information and fixes.

GNU GNU Privacy Guard 1.0

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.0 .6

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.0.1

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.0.2

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.0.3

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.0.4

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU finger 1.0.7

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.0.7

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.2.1

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

Slackware gnupg-1.4.2.2-i386-1.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/g nupg-1.4.2.2-i386-1.tgz

GNU GNU Privacy Guard 1.2.2 -rc1

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.2.2 -r1

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.2.3

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

Slackware gnupg-1.4.2.2-i486-1.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ gnupg-1.4.2.2-i486-1.tgz

Slackware gnupg-1.4.2.2-i486-1.tgz
Slackware 9.1:
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/g nupg-1.4.2.2-i486-1.tgz

GNU GNU Privacy Guard 1.2.4

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

Mandriva gnupg-1.4.2.2-0.1.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.2.2-0.1.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/

Mandriva gnupg-1.4.2.2-0.1.C30mdk.src.rpm
Corporate 3.0:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.2.2-0.1.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.2.2-0.1.C30mdk.x86_64.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/

Mandriva gnupg-1.4.2.2-0.1.M20mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/

Slackware gnupg-1.4.2.2-i486-1.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ gnupg-1.4.2.2-i486-1.tgz

SuSE gpg-1.2.4-68.13.i586.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gpg-1.2.4-68.13.i 586.rpm

SuSE gpg-1.2.4-68.13.x86_64.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gpg-1.2.4-68. 13.x86_64.rpm

Ubuntu gnupg_1.2.4-4ubuntu2.3_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.2.4-4ubunt u2.3_amd64.deb

Ubuntu gnupg_1.2.4-4ubuntu2.3_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.2.4-4ubunt u2.3_i386.deb

Ubuntu gnupg_1.2.4-4ubuntu2.3_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.2.4-4ubunt u2.3_powerpc.deb

Ubuntu gpgv-udeb_1.4.1-1ubuntu1.2_i386.udeb
Updated packages for Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gpgv-udeb_1.4.1-1u buntu1.2_i386.udeb

Ubuntu gpgv-udeb_1.4.1-1ubuntu1.2_powerpc.udeb
Updated packages for Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gpgv-udeb_1.4.1-1u buntu1.2_powerpc.udeb

GNU GNU Privacy Guard 1.2.6

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

Trustix gnupg-1.2.6-2tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-1.4.2.2-1tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-utils-1.2.6-2tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-utils-1.4.2.2-1tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

GNU GNU Privacy Guard 1.3.3

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.3.4

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GNU GNU Privacy Guard 1.4

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

Mandriva gnupg-1.4.2.2-0.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.2.2-0.1.102mdk.src.rpm
Mandriva Linux 10.2:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.2.2-0.1.102mdk.x86_64.rpm
Mandriva Linux 10.2:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.2.2-0.1.102mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/

Mandriva gnupg-1.4.2.2-0.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/

Mandriva gnupg-1.4.2.2-0.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/

SuSE gpg-1.4.0-4.4.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gpg-1.4.0-4.4.i58 6.rpm

SuSE gpg-1.4.0-4.4.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/gpg-1.4.0-4.4.x 86_64.rpm

GNU GNU Privacy Guard 1.4.1

Debian gnupg_1.4.1-1.sarge3_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_alpha.deb

Debian gnupg_1.4.1-1.sarge3_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_amd64.deb

Debian gnupg_1.4.1-1.sarge3_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_arm.deb

Debian gnupg_1.4.1-1.sarge3_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_hppa.deb

Debian gnupg_1.4.1-1.sarge3_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_i386.deb

Debian gnupg_1.4.1-1.sarge3_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_ia64.deb

Debian gnupg_1.4.1-1.sarge3_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_m68k.deb

Debian gnupg_1.4.1-1.sarge3_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_mips.deb

Debian gnupg_1.4.1-1.sarge3_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_mipsel.deb

Debian gnupg_1.4.1-1.sarge3_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_powerpc.deb

Debian gnupg_1.4.1-1.sarge3_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_s390.deb

Debian gnupg_1.4.1-1.sarge3_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sar ge3_sparc.deb

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

RedHat Fedora gnupg-1.4.2.2-1.i386.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

RedHat Fedora gnupg-1.4.2.2-1.ppc.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

RedHat Fedora gnupg-1.4.2.2-1.x86_64.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

RedHat Fedora gnupg-debuginfo-1.4.2.2-1.i386.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

RedHat Fedora gnupg-debuginfo-1.4.2.2-1.ppc.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

RedHat Fedora gnupg-debuginfo-1.4.2.2-1.x86_64.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

Ubuntu gnupg_1.4.1-1ubuntu1.2_amd64.deb
Updated packages for Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.4.1-1ubunt u1.2_amd64.deb

Ubuntu gnupg_1.4.1-1ubuntu1.2_i386.deb
Updated packages for Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.4.1-1ubunt u1.2_i386.deb

Ubuntu gnupg_1.4.1-1ubuntu1.2_powerpc.deb
Updated packages for Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.4.1-1ubunt u1.2_powerpc.deb

Ubuntu gpgv-udeb_1.4.1-1ubuntu1.2_amd64.udeb
Updated packages for Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gpgv-udeb_1.4.1-1u buntu1.2_amd64.udeb

GNU GNU Privacy Guard 1.4.2 .1

GNU GNU Privacy Guard 1.4.2.2
http://www.gnupg.org/download/

GIMP GIMP 2.2.4

Mandriva gnupg-1.4.2.2-0.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/

Mandriva gnupg-1.4.2.2-0.1.102mdk.x86_64.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/