Debian 9844 Published by

A gnupg security update has been released for Debian 6.0 LTS



Package : gnupg
Version : 1.4.10-4+squeeze6
CVE ID : CVE-2014-5270

Genkin, Pipman and Tromer discovered a side-channel attack on Elgamal
encryption subkeys (CVE-2014-5270).

In addition, this update hardens GnuPG's behaviour when treating keyserver
responses; GnuPG now filters keyserver responses to only accepts those
keyids actually requested by the user.