UbuntuUpdates.org

Package "gnupg2"

Name: gnupg2

Description:

GNU privacy guard - a free PGP replacement (dummy transitional package)

Latest version: 2.2.8-3ubuntu1.1
Release: cosmic (18.10)
Level: security
Repository: universe
Homepage: https://www.gnupg.org/

Links

Save this URL for the latest version of "gnupg2": https://www.ubuntuupdates.org/gnupg2


Download "gnupg2"


Other versions of "gnupg2" in Cosmic

Repository Area Version
base universe 2.2.8-3ubuntu1
base main 2.2.8-3ubuntu1
security main 2.2.8-3ubuntu1.1
updates main 2.2.8-3ubuntu1.1
updates universe 2.2.8-3ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.2.8-3ubuntu1.1 2019-01-10 18:06:37 UTC

  gnupg2 (2.2.8-3ubuntu1.1) cosmic-security; urgency=medium

  * SECURITY UPDATE: CSRF in dirmngr
    - debian/patches/CVE-2018-1000858.patch: don't follow a redirect in
      dirmngr/Makefile.am, dirmngr/http.c, dirmngr/http.h,
      dirmngr/ks-engine-hkp.c, dirmngr/ks-engine-http.c,
      dirmngr/t-http-basic.c, dirmngr/t-http.c.
    - CVE-2018-1000858

 -- Marc Deslauriers <email address hidden> Thu, 10 Jan 2019 08:01:09 -0500

CVE-2018-1000858 GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Infor



About   -   Send Feedback to @ubuntu_updates