Package        : gnupg
Version        : 1.4.12-7+deb7u9
CVE ID         : CVE-2017-7526

Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot
Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal and
Yuval Yarom discovered that gnupg is prone to a local side-channel
attack allowing full key recovery for RSA-1024.

See https://eprint.iacr.org/2017/627 for details.

For Debian 7 "Wheezy", these problems have been fixed in version
1.4.12-7+deb7u9.

We recommend that you upgrade your gnupg packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Debian LTS: DLA-1080-1: gnupg security update

August 31, 2017
Daniel J

Summary

For Debian 7 "Wheezy", these problems have been fixed in version
1.4.12-7+deb7u9.

We recommend that you upgrade your gnupg packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
Package        : gnupg 
Version : 1.4.12-7+deb7u9
CVE ID : CVE-2017-7526

Related News