[Frugalware-security] [ FSA-134 ] gpgme

[voroskoi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Frugalware Security Advisory                           FSA-134

Date: 2007-03-15
Package: gpgme
Vulnerable versions: <= 1.0.3-1
Unaffected versions: >= 1.0.3-2siwenna1
Related bugreport: http://bugs.frugalware.org/task/1785
CVE: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1263

Description
===========

Many applications are using the library GPGME which implements an easy way to process OpenPGP messages using gpg. We have updated GPGME to make it immune against problem mentioned in FSA-133 even if an old version of gpg is being used.

Updated Packages
================

Check if you have gpgme installed:

	# pacman -Q gpgme

If found, then you should upgrade to the latest version:

	# pacman -Sy gpgme

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: See http://ftp.frugalware.org/pub/README.GPG for info

iD8DBQFF+ZoZZ7NElSD1VhkRAmtOAJ0SzX2E+poDzUB5aAW3PlExtBHBigCcDlFK
CzlGOPYV1DBvZb/IG5WzQDs=
=hJnP
-----END PGP SIGNATURE-----