PGP Releases ADK Fix

26 August 2000

Date: Sat, 26 Aug 2000 11:33:29 +0100
To: usual@espace.net, <ukcrypto@maillist.ox.ac.uk>
From: Fearghas McKay <fm@espace.net>
Subject: Fwd: [PGP-USERS] ANNOUNCEMENT: PGP 6.5.8 Now Available

--- begin forwarded text

Date: Sat, 26 Aug 2000 00:24:43 -0700
From: Will Price <wprice@cyphers.net>
To: pgp-users@cryptorights.org
Subject: [PGP-USERS] ANNOUNCEMENT: PGP 6.5.8 Now Available

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The following releases have just been made available from the MIT PGP
Freeware distribution site [Cryptome mirrors below]:

http://web.mit.edu/network/pgp.html
	* PGPfreeware 6.5.8 for Windows
	* PGPfreeware 6.5.8 for Macintosh

These releases fix the ADK Bug discussed at the following location:

http://www.pgp.com/other/advisories/adk.asp

In addition, the following Hotfixes have been submitted and will be
posted soon (but are not posted yet) at the above pgp.com webpage:

PGP Desktop Security 6.5.3 for Windows ADK Hotfix
PGP Personal Privacy 6.5.3 for Windows ADK Hotfix
PGP Desktop Security 6.5.2a for Macintosh ADK Hotfix
PGP Personal Privacy 6.5.2a for Macintosh ADK Hotfix

These hotfixes simply replace one file in existing installations to
fix the ADK bug. PGP, Inc. strongly encourages all users to
immediately upgrade their PGP installations. More releases and
hotfixes are on the way for PGP Command Line, PGP e-Business Server,
and PGP Certserver products on all platforms.

- -- Will

Will Price, Director of Engineering
PGP Security, Inc.
a division of Network Associates, Inc.

-----BEGIN PGP SIGNATURE-----

iQA/AwUBOadv/qy7FkvPc+xMEQLz6wCgiE47+cogET02vQVFIlMLOmpxt6sAoPPT
ntdbcAz5B78d2jlPCJ+tn8Le
=/QQ8
-----END PGP SIGNATURE-----

....................................................................
Unsubscribe: <mailto:pgp-users-listbot@cryptorights.org?body=unsubscribe>
Automated Help/Info: <mailto:pgp-users-listbot@cryptorights.org?body=help>
List Homepage: <http://cryptorights.org/pgp-users/>
List Admin (human): <mailto:pgp-users-admin-human@cryptorights.org>
Please do not send administrative commands to the list address!  Thanks.

--- end forwarded text

From a PGP announcement on August 26, 2000

http://pgpdist.mit.edu/distserver/zz943495881/newpgp/WhatsNewWin.html

FIXES IN THIS RELEASE
This release corrects a security-related bug with Additional Decryption Keys (ADKs) that may allow sophisticated attackers to add unauthorized ADK key IDs to the unhashed areas of PGP public keys.
For more information about this bug, please review the PGP ADK Security Advisory available on www.pgp.com.

These Cryptome mirrors were downloaded from the MIT PGP Freeware server on August 26, 2000:

Windows 98, NT, Windows 2000:

http://jya.com/pgpfree/PGPFW658Win32.zip (7.8MB)

Mac:

http://jya.com/pgpfree/PGPFW658Mac_sit.bin (5.6MB)

JYA may be initially overloaded, so mirrors would be appreciated. Please send URL to: jya@pipeline.com