| Package | Affected versions | Patched versions |
|---|---|---|
| privacy guard | = 1.0.2= 1.0.3= 1.0.3b= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.2= 1.2.1= 1.2.2= 1.2.3 |
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free