Yellow Dog Linux Security Announcement
--------------------------------------

Package:	gnupg 
Issue Date:	Jun 02,2003   
Priority:	medium
Advisory ID: 	YDU-20030602-4


1. 	Topic:

	Updated gnupg packages are available.


2. 	Problem:
	
	"The GNU Privacy Guard (GnuPG) is a utility for encrypting data and
	creating digital signatures.

	When evaluating trust values for different UIDs assigned to a given key,
	GnuPG versions earlier than 1.2.2 would incorrectly associate the trust
	value of the UID with the highest trust value with every UID assigned to
	that key. This would prevent an expected warning message from being generated.

	All users are advised to upgrade to these errata packages."

	(From Red Hat Advisory)


3. 	Solution:

   	a) Updating via apt...
   	We suggest that you use the apt-get program to keep your
   	system up-to-date. The following command(s) will retrieve
   	and install the fixed version of this update onto your system:

		apt-get update
		apt-get install gnupg  

   	b) Updating manually...
	Download the updates below and then run the following rpm command.
   	(Please use a mirror site)

		rpm -Fvh [filenames]
		Yellow Dog Linux 3.0
		ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/
			ppc/gnupg-1.2.1-4.ppc.rpm

		Yellow Dog Linux 2.3
		ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-2.3/
			ppc/gnupg-1.0.7-7.ppc.rpm


4. Verification

MD5 checksum			  Package
--------------------------------  ----------------------------
[Yellow Dog Linux 3.0]
9157c5b763081b40ecbc766e11b3cb1a  SRPMS/gnupg-1.2.1-4.src.rpm
4e8936327b38dc3bea808f4881ac0e9b  ppc/gnupg-1.2.1-4.ppc.rpm

[Yellow Dog Linux 2.3]
f2bd6a578330e2c9cfdbbc7179a1ead1  SRPMS/gnupg-1.0.7-7.src.rpm
a615136f46c89e312a9f5877f9582698  ppc/gnupg-1.0.7-7.ppc.rpm


If you wish to verify that each package has not been corrupted or tampered with,
examine the md5sum with the following command: md5sum <filename>


5. Misc.

Terra Soft has setup a moderated mailing list where these security, bugfix, and package
enhancement announcements will be posted. See http://lists.terrasoftsolutions.com/ for more
information.

For information regarding the usage of apt-get, see:
http://www.yellowdoglinux.com/support/solutions/ydl_general/apt-get.shtml