26 August 2000
Date: Sat, 26 Aug 2000 11:33:29 +0100 To: firstname.lastname@example.org, <email@example.com> From: Fearghas McKay <firstname.lastname@example.org> Subject: Fwd: [PGP-USERS] ANNOUNCEMENT: PGP 6.5.8 Now Available --- begin forwarded text Date: Sat, 26 Aug 2000 00:24:43 -0700 From: Will Price <email@example.com> To: firstname.lastname@example.org Subject: [PGP-USERS] ANNOUNCEMENT: PGP 6.5.8 Now Available -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following releases have just been made available from the MIT PGP Freeware distribution site [Cryptome mirrors below]: http://web.mit.edu/network/pgp.html * PGPfreeware 6.5.8 for Windows * PGPfreeware 6.5.8 for Macintosh These releases fix the ADK Bug discussed at the following location: http://www.pgp.com/other/advisories/adk.asp In addition, the following Hotfixes have been submitted and will be posted soon (but are not posted yet) at the above pgp.com webpage: PGP Desktop Security 6.5.3 for Windows ADK Hotfix PGP Personal Privacy 6.5.3 for Windows ADK Hotfix PGP Desktop Security 6.5.2a for Macintosh ADK Hotfix PGP Personal Privacy 6.5.2a for Macintosh ADK Hotfix These hotfixes simply replace one file in existing installations to fix the ADK bug. PGP, Inc. strongly encourages all users to immediately upgrade their PGP installations. More releases and hotfixes are on the way for PGP Command Line, PGP e-Business Server, and PGP Certserver products on all platforms. - -- Will Will Price, Director of Engineering PGP Security, Inc. a division of Network Associates, Inc. -----BEGIN PGP SIGNATURE----- iQA/AwUBOadv/qy7FkvPc+xMEQLz6wCgiE47+cogET02vQVFIlMLOmpxt6sAoPPT ntdbcAz5B78d2jlPCJ+tn8Le =/QQ8 -----END PGP SIGNATURE----- .................................................................... Unsubscribe: <mailto:email@example.com?body=unsubscribe> Automated Help/Info: <mailto:firstname.lastname@example.org?body=help> List Homepage: <http://cryptorights.org/pgp-users/> List Admin (human): <mailto:email@example.com> Please do not send administrative commands to the list address! Thanks. --- end forwarded text
From a PGP announcement on August 26, 2000
FIXES IN THIS RELEASE
This release corrects a security-related bug with Additional Decryption Keys (ADKs) that may allow sophisticated attackers to add unauthorized ADK key IDs to the unhashed areas of PGP public keys.
For more information about this bug, please review the PGP ADK Security Advisory available on www.pgp.com.
These Cryptome mirrors were downloaded from the MIT PGP Freeware server on August 26, 2000:
Windows 98, NT, Windows 2000:
JYA may be initially overloaded, so mirrors would be appreciated. Please send URL to: firstname.lastname@example.org
The US Bureau of Export Administration has been notified :
Date: Sat, 26 Aug 2000 09:04:01 -0400 To: email@example.com From: John Young <firstname.lastname@example.org> Subject: Notice Cc: email@example.com August 26, 2000 Dear Crypt, Cryptome offers today PGP Freeware 6.5.8: http://jya.com/pgpfree/PGPFW658Win32.zip (7.8MB) http://jya.com/pgpfree/PGPFW658Mac_sit.bin (5.6MB) The offer has been announced on: http://cryptome.org Regards, John Young Cryptome