GnuPG Security Update for Ubuntu
Posted on: 08/08/2018 06:52 AM

Updated GnuPG packages has been released for both Ubuntu Linux 16.04 LTS and 14.04 LTS

GnuPG Security Update for Ubuntu

Ubuntu Security Notice USN-3733-1
August 07, 2018

gnupg vulnerability

A security issue affects these releases of Ubuntu and its derivatives:

- - Ubuntu 16.04 LTS
- - Ubuntu 14.04 LTS


GnuPG could be made to expose sensitive information.

Software Description:
- - gnupg: GNU privacy guard - a free PGP replacement


Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink,
Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom
discovered that GnuPG is vulnerable to a cache side-channel attack. A local
attacker could use this attack to recover RSA private keys.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
gnupg 1.4.20-1ubuntu3.3
gnupg-curl 1.4.20-1ubuntu3.3
gpgv 1.4.20-1ubuntu3.3

Ubuntu 14.04 LTS:
gnupg 1.4.16-1ubuntu2.6
gnupg-curl 1.4.16-1ubuntu2.6
gpgv 1.4.16-1ubuntu2.6

In general, a standard system update will make all the necessary changes.


Package Information:

Printed from Linux Compatible (