[LWN Logo]
[LWN.net]
From:	 tsl@trustix.com (Trustix Secure Linux Advisor)
To:	 tsl-announce@trustix.org
Subject: TSL-2002-0036 - gnupg
Date:	 Fri, 1 Mar 2002 18:30:13 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Trustix Secure Linux Bugfix Advisory #2002-0036

Package name:      gnupg
Summary:           pgp public key management
Date:              2002-03-01
Affected versions: TSL 1.1, 1.2, 1.5

- --------------------------------------------------------------------------

Problem description:
  We have updated our pgp public key, with which we sign packages and 
  advisories. Anyone using gpg for TSL-validation need to keep this package
  up to date.

Action:
  We recommend that all systems with this package installed are upgraded.


Location:
  All TSL updates are available from
  <URI:http://www.trustix.net/pub/Trustix/updates/>
  <URI:ftp://ftp.trustix.net/pub/Trustix/updates/>


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.

  Get SWUP from:
  <URI:ftp://ftp.trustix.net/pub/Trustix/software/swup/>


Public testing:
  These packages have been available for public testing for some time.
  If you want to contribute by testing the various packages in the
  testing tree, please feel free to share your findings on the
  tsl-discuss mailinglist.
  The testing tree is located at
  <URI:http://www.trustix.net/pub/Trustix/testing/>
  <URI:ftp://ftp.trustix.net/pub/Trustix/testing/>
  

Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.net/support/>


Verification:
  This advisory along with all TSL packages are signed with the TSL sign key.
  This key is available from:
  <URI:http://www.trustix.net/TSL-GPG-KEY>

  The advisory itself is available from the errata pages at
  <URI:http://www.trustix.net/errata/trustix-1.2/> and
  <URI:http://www.trustix.net/errata/trustix-1.5/>
  or directly at
  <URI:http://www.trustix.net/errata/misc/2002/TSL-2002-0036-gnupg.asc.txt>


MD5sums of the packages:
- --------------------------------------------------------------------------
f32e8029e33ac600d6d4e3af663f3093  ./1.5/SRPMS/gnupg-1.0.6-3tr.src.rpm
52539a423ef0f2e744fb1e208719bdb1  ./1.5/RPMS/gnupg-1.0.6-3tr.i586.rpm
f32e8029e33ac600d6d4e3af663f3093  ./1.2/SRPMS/gnupg-1.0.6-3tr.src.rpm
d8e99106213dade9d634ea5a1649bc4a  ./1.2/RPMS/gnupg-1.0.6-3tr.i586.rpm
f32e8029e33ac600d6d4e3af663f3093  ./1.1/SRPMS/gnupg-1.0.6-3tr.src.rpm
9aedae290bc6366733ecb71f06a6d588  ./1.1/RPMS/gnupg-1.0.6-3tr.i586.rpm
- --------------------------------------------------------------------------


Trustix Security Team

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8f5npwRTcg4BxxS0RAhs/AJ4xD13NyfOi0aWw5rrHXT6sBJpPZACeOPbe
qFOkje5VzmJjy7gWHIFk/gY=
=49Z8
-----END PGP SIGNATURE-----

_______________________________________________
tsl-announce mailing list
tsl-announce@trustix.org
http://www.trustix.org/mailman/listinfo.cgi/tsl-announce