The USN-3675-2: GnuPG 2 vulnerability is fixed automatically and installed on SecureDrop production instances. I received the following OSSEC alerts for the Application Server.
OSSEC HIDS Notification. 2018 Jun 15 04:59:08 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/watchgnupg' Old md5sum was: '05dc2416b9c329e9658fe7a62980fb89' New md5sum is : '20b6aa59c75fd8e39a38b42e85ee6a0d' Old sha1sum was: 'e56abc082f9e51e334a39e652ae7dfff6a9ecbce' New sha1sum is : 'ba5c3a794dbab1d511b85541ad927c520a173b44' --END OF NOTIFICATION
OSSEC HIDS Notification. 2018 Jun 15 04:59:13 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/gpg2' Old md5sum was: 'de35184475bbc7a712882afb9bdd29e8' New md5sum is : 'd44b8bccc58d4d189b028d5cd2526645' Old sha1sum was: '0e895674b1f02a4f6be645171db9f27dd064dd1d' New sha1sum is : 'd4e2ae82268ff39b5298c41167ccd599215bb6ab' --END OF NOTIFICATION
OSSEC HIDS Notification. 2018 Jun 15 04:59:26 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/gpg-agent' Old md5sum was: '4cb3e040570ab56a228e90c39182bf44' New md5sum is : 'fb348a944fc35a08ba308d1e5e4e6005' Old sha1sum was: 'd2e89beb7c1fd4a29c08757e1fc75534249b0909' New sha1sum is : '32c1c7c52770ebb0a5ea584d9b70edc7d416f9f7' --END OF NOTIFICATION
OSSEC HIDS Notification. 2018 Jun 15 04:59:39 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/gpgkey2ssh' Old md5sum was: '74f5146b6673b080ca4f62ae3c81bd53' New md5sum is : '2b235b7798f6afde803c0039b7ce4536' Old sha1sum was: 'b6797492c3587d0af502b900d7c5125a29fd3046' New sha1sum is : '312b3257d66de8cf1e6bac47c2a8c72c8d858aba' --END OF NOTIFICATION
OSSEC HIDS Notification. 2018 Jun 15 04:59:59 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/kbxutil' Old md5sum was: 'b1eb3cb8a719ef7129f41c2463e49c25' New md5sum is : '41b921db9d88794d043c304dae3089fd' Old sha1sum was: '7a4453ba849cb8c6c2eedfb617b02c13c83983fd' New sha1sum is : '88d6e8d32682e520dafa79b87c85fd0a10c4001a' --END OF NOTIFICATION
OSSEC HIDS Notification. 2018 Jun 15 05:00:10 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/symcryptrun' Old md5sum was: '46df55cf18a1da92923a7b0421f2f86d' New md5sum is : 'fc53742e790bc996b7f31c0ed8171060' Old sha1sum was: '7fe449976053c939192d7e514544f236d9e0516a' New sha1sum is : 'f7935451a6d8a25f4c743bc49d280a49d931d3ac' --END OF NOTIFICATION
OSSEC HIDS Notification. 2018 Jun 15 05:00:19 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/gpgconf' Old md5sum was: '3a8ae0ff6c370f178d7d96a1956f609a' New md5sum is : '4bae0f3890a0b2b0bf26867a1496feed' Old sha1sum was: '5f0ff4a08d41ff3860390d80670e6279267a3b96' New sha1sum is : 'ffd18546c3602c05fa2484f7efb037a08dc649a6' --END OF NOTIFICATION
OSSEC HIDS Notification. 2018 Jun 15 05:00:32 Received From: (app) A.B.C.D->syscheck Rule: 550 fired (level 7) -> "Integrity checksum changed." Portion of the log(s): Integrity checksum changed for: '/usr/bin/gpg-connect-agent' Old md5sum was: '6fe7d29710012671f691ee7b16ae84dc' New md5sum is : 'bad2f100e09f58700f720c93b98bd23f' Old sha1sum was: '5455d50c0849ec676e4ea72344ad0e9c00368167' New sha1sum is : 'e97337625aceb9c48db5993633690922af097c6c' --END OF NOTIFICATION