Re: [Rkhunter-users] Rkhunter-users Digest, Vol 52, Issue 7

[Al V. <alv...@ma...>]

On 11/20/10 3:45 PM, "aus9" <deb...@gm...> wrote:

> Re: gpg version
> 
> I am on 1.3.8 altho Chris reported on 1.3.6
> 
> update has been done
> 
> peeking into /var/lib/rkhunter/db/programs_bad.dat shows gpg expects
> to be 1.4.10 but
> 
I think you are misinterpreting what programs_bad.dat is saying.  That is a
list of known "bad" versions that are out-of-date and does not list what it
expects.  According to <http://www.gnupg.org/> the latest version is 1.4.11
released about a month ago.

> $ gpg --version
> gpg (GnuPG) 1.4.10
> 
> I am on home computer so can afford to reboot and yet
> 
> # rkhunter --enable apps
> 
> log shows
> 
> [07:34:30]   Checking version of GnuPG                       [ Warning ]
> [07:34:30] Warning: Application 'gpg', version '1.4.10', is out of
> date, and possibly a security risk.


-Al-
 
-- 
Al Varnell
Mountain View, CA