USN-3675-2: GnuPG 2 vulnerability


#1

The USN-3675-2: GnuPG 2 vulnerability is fixed automatically and installed on SecureDrop production instances. I received the following OSSEC alerts for the Application Server.

OSSEC HIDS Notification.
2018 Jun 15 04:59:08

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/watchgnupg'
Old md5sum was: '05dc2416b9c329e9658fe7a62980fb89'
New md5sum is : '20b6aa59c75fd8e39a38b42e85ee6a0d'
Old sha1sum was: 'e56abc082f9e51e334a39e652ae7dfff6a9ecbce'
New sha1sum is : 'ba5c3a794dbab1d511b85541ad927c520a173b44'

 --END OF NOTIFICATION

OSSEC HIDS Notification.
2018 Jun 15 04:59:13

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/gpg2'
Old md5sum was: 'de35184475bbc7a712882afb9bdd29e8'
New md5sum is : 'd44b8bccc58d4d189b028d5cd2526645'
Old sha1sum was: '0e895674b1f02a4f6be645171db9f27dd064dd1d'
New sha1sum is : 'd4e2ae82268ff39b5298c41167ccd599215bb6ab'

 --END OF NOTIFICATION
 
OSSEC HIDS Notification.
2018 Jun 15 04:59:26

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/gpg-agent'
Old md5sum was: '4cb3e040570ab56a228e90c39182bf44'
New md5sum is : 'fb348a944fc35a08ba308d1e5e4e6005'
Old sha1sum was: 'd2e89beb7c1fd4a29c08757e1fc75534249b0909'
New sha1sum is : '32c1c7c52770ebb0a5ea584d9b70edc7d416f9f7'

 --END OF NOTIFICATION
OSSEC HIDS Notification.
2018 Jun 15 04:59:39

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/gpgkey2ssh'
Old md5sum was: '74f5146b6673b080ca4f62ae3c81bd53'
New md5sum is : '2b235b7798f6afde803c0039b7ce4536'
Old sha1sum was: 'b6797492c3587d0af502b900d7c5125a29fd3046'
New sha1sum is : '312b3257d66de8cf1e6bac47c2a8c72c8d858aba'

 --END OF NOTIFICATION
 
OSSEC HIDS Notification.
2018 Jun 15 04:59:59

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/kbxutil'
Old md5sum was: 'b1eb3cb8a719ef7129f41c2463e49c25'
New md5sum is : '41b921db9d88794d043c304dae3089fd'
Old sha1sum was: '7a4453ba849cb8c6c2eedfb617b02c13c83983fd'
New sha1sum is : '88d6e8d32682e520dafa79b87c85fd0a10c4001a'

 --END OF NOTIFICATION
 
OSSEC HIDS Notification.
2018 Jun 15 05:00:10

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/symcryptrun'
Old md5sum was: '46df55cf18a1da92923a7b0421f2f86d'
New md5sum is : 'fc53742e790bc996b7f31c0ed8171060'
Old sha1sum was: '7fe449976053c939192d7e514544f236d9e0516a'
New sha1sum is : 'f7935451a6d8a25f4c743bc49d280a49d931d3ac'

 --END OF NOTIFICATION
OSSEC HIDS Notification.
2018 Jun 15 05:00:19

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/gpgconf'
Old md5sum was: '3a8ae0ff6c370f178d7d96a1956f609a'
New md5sum is : '4bae0f3890a0b2b0bf26867a1496feed'
Old sha1sum was: '5f0ff4a08d41ff3860390d80670e6279267a3b96'
New sha1sum is : 'ffd18546c3602c05fa2484f7efb037a08dc649a6'

 --END OF NOTIFICATION
OSSEC HIDS Notification.
2018 Jun 15 05:00:32

Received From: (app) A.B.C.D->syscheck
Rule: 550 fired (level 7) -> "Integrity checksum changed."
Portion of the log(s):

Integrity checksum changed for: '/usr/bin/gpg-connect-agent'
Old md5sum was: '6fe7d29710012671f691ee7b16ae84dc'
New md5sum is : 'bad2f100e09f58700f720c93b98bd23f'
Old sha1sum was: '5455d50c0849ec676e4ea72344ad0e9c00368167'
New sha1sum is : 'e97337625aceb9c48db5993633690922af097c6c'

 --END OF NOTIFICATION