GnuPG Detached Signature Verification Bypass Vulnerability

GnuPG Detached Signature Verification Bypass Vulnerability

Solution:
Please see the referenced vendor advisories for more information and fixes.

GNU GNU Privacy Guard 1.0

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.0 .6

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.0.1

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.0.2

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.0.3

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.0.4

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU finger 1.0.7

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.0.7

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

Mandriva gnupg-1.0.7-3.4.C21mdk.i586.rpm
Corporate Server 2.1:
http://www.mandriva.com/en/download

Mandriva gnupg-1.0.7-3.4.C21mdk.src.rpm
Corporate Server 2.1:
http://www.mandriva.com/en/download

Mandriva gnupg-1.0.7-3.4.C21mdk.x86_64.rpm
Corporate Server 2.1:
http://www.mandriva.com/en/download

GNU GNU Privacy Guard 1.2.1

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.2.2 -rc1

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.2.2 -r1

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.2.3

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.2.4

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

Mandriva gnupg-1.2.4-1.2.101mdk.i586.rpm
Mandriva Linux 10.1:
http://www.mandriva.com/en/download

Mandriva gnupg-1.2.4-1.2.101mdk.src.rpm
Mandriva Linux 10.1:
http://www.mandriva.com/en/download

Mandriva gnupg-1.2.4-1.2.101mdk.x86_64.rpm
Mandriva Linux 10.1:
http://www.mandriva.com/en/download

Mandriva gnupg-1.2.4-1.2.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download

Mandriva gnupg-1.2.4-1.2.C30mdk.src.rpm
Corporate 3.0:
http://www.mandriva.com/en/download

Mandriva gnupg-1.2.4-1.2.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download

Ubuntu gnupg_1.2.4-4ubuntu2.2_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.2.4-4ubunt u2.2_amd64.deb

Ubuntu gnupg_1.2.4-4ubuntu2.2_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.2.4-4ubunt u2.2_i386.deb

Ubuntu gnupg_1.2.4-4ubuntu2.2_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.2.4-4ubunt u2.2_powerpc.deb

GNU GNU Privacy Guard 1.2.6

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

Trustix gnupg-1.4.2.1-1tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-utils-1.4.2.1-1tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

GNU GNU Privacy Guard 1.3.3

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.3.4

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

GNU GNU Privacy Guard 1.4

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

Mandriva gnupg-1.4.0-4.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.0-4.1.102mdk.src.rpm
Mandriva Linux 10.2:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.0-4.1.102mdk.x86_64.rpm
Mandriva Linux 10.2:
http://www.mandriva.com/en/download

GNU GNU Privacy Guard 1.4.1

Debian gnupg_1.4.1-1sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_alpha.deb

Debian gnupg_1.4.1-1sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_amd64.deb

Debian gnupg_1.4.1-1sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_arm.deb

Debian gnupg_1.4.1-1sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_hppa.deb

Debian gnupg_1.4.1-1sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_i386.deb

Debian gnupg_1.4.1-1sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_ia64.deb

Debian gnupg_1.4.1-1sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_m68k.deb

Debian gnupg_1.4.1-1sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_mips.deb

Debian gnupg_1.4.1-1sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_mipsel.deb

Debian gnupg_1.4.1-1sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_powerpc.deb

Debian gnupg_1.4.1-1sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_s390.deb

Debian gnupg_1.4.1-1sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarg e1_sparc.deb

GNU gnupg-1.4.2.1.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.1.tar.bz2

Ubuntu gnupg_1.4.1-1ubuntu1.1_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.4.1-1ubunt u1.1_amd64.deb

Ubuntu gnupg_1.4.1-1ubuntu1.1_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.4.1-1ubunt u1.1_i386.deb

Ubuntu gnupg_1.4.1-1ubuntu1.1_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gnupg_1.4.1-1ubunt u1.1_powerpc.deb

Ubuntu gpgv-udeb_1.4.1-1ubuntu1.1_amd64.udeb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gpgv-udeb_1.4.1-1u buntu1.1_amd64.udeb

Ubuntu gpgv-udeb_1.4.1-1ubuntu1.1_i386.udeb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gpgv-udeb_1.4.1-1u buntu1.1_i386.udeb

Ubuntu gpgv-udeb_1.4.1-1ubuntu1.1_powerpc.udeb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/g/gnupg/gpgv-udeb_1.4.1-1u buntu1.1_powerpc.udeb

S.u.S.E. Linux Professional 10.0

SuSE liby2util-2.12.9-0.4.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/liby2util-2.12.9 -0.4.i586.rpm

SuSE liby2util-2.12.9-0.4.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/liby2util-2.12.9- 0.4.ppc.rpm

SuSE liby2util-2.12.9-0.4.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/liby2util-2.12 .9-0.4.x86_64.rpm

SuSE liby2util-devel-2.12.9-0.4.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/liby2util-devel- 2.12.9-0.4.i586.rpm

SuSE liby2util-devel-2.12.9-0.4.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/liby2util-devel-2 .12.9-0.4.ppc.rpm

SuSE liby2util-devel-2.12.9-0.4.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/liby2util-deve l-2.12.9-0.4.x86_64.rpm

S.u.S.E. Linux Professional 9.1

SuSE gpg-1.2.4-68.10.i586.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gpg-1.2.4-68.10.i 586.rpm

SuSE gpg-1.2.4-68.10.x86_64.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gpg-1.2.4-68. 10.x86_64.rpm

SuSE liby2util-2.9.27-0.7.i586.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/liby2util-2.9.27- 0.7.i586.rpm

SuSE liby2util-2.9.27-0.7.x86_64.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/liby2util-2.9 .27-0.7.x86_64.rpm

SuSE liby2util-devel-2.9.27-0.7.i586.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/liby2util-devel-2 .9.27-0.7.i586.rpm

SuSE liby2util-devel-2.9.27-0.7.x86_64.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/liby2util-dev el-2.9.27-0.7.x86_64.rpm

S.u.S.E. Linux Professional 9.3

SuSE liby2util-2.11.7-0.3.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/liby2util-2.11.7- 0.3.i586.rpm

SuSE liby2util-2.11.7-0.3.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/liby2util-2.11. 7-0.3.x86_64.rpm

SuSE liby2util-devel-2.11.7-0.3.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/liby2util-devel-2 .11.7-0.3.i586.rpm

SuSE liby2util-devel-2.11.7-0.3.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/liby2util-devel -2.11.7-0.3.x86_64.rpm