Advisories » MGAA-2019-0080

Updated gnupg2 packages mitigates DoS on keyservers

Publication date: 10 Aug 2019
Modification date: 09 Aug 2019
Type: bugfix
Affected Mageia releases : 7

Description

This update adds fixes to mitigate DoS attacs on keyserver being
flooded with faked key-signatures., by ignoring all key-signatures
received from keyservers. The old behaviour can be achieved by adding
keyserver-options no-self-sigs-only,no-import-clean to your gpg.conf
                

References

• https://bugs.mageia.org/show_bug.cgi?id=25126
• https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000439.html

SRPMS

7/core

• gnupg2-2.2.17-1.mga7