Package : gnupg Version : 1.4.10-4+squeeze6 CVE ID : CVE-2014-5270
Genkin, Pipman and Tromer discovered a side-channel attack on Elgamal encryption subkeys (CVE-2014-5270). In addition, this update hardens GnuPG's behaviour when treating keyserver responses; GnuPG now filters keyserver responses to only accepts those keyids actually requested by the user.
signature.asc
Description: Digital signature
