drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Prüfung von Signaturen in gnupg2
Name: |
Mangelnde Prüfung von Signaturen in gnupg2 |
|
ID: |
SSA:2018-159-01 |
|
Distribution: |
Slackware |
|
Plattformen: |
Slackware -current, Slackware x86_64 -current, Slackware x86_64 13.37, Slackware 13.37, Slackware 14.0, Slackware x86_64 14.0, Slackware 14.1, Slackware x86_64 14.1, Slackware 14.2, Slackware x86_64 14.2 |
|
Datum: |
Sa, 9. Juni 2018, 00:30 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12020 |
|
Applikationen: |
The GNU Privacy Guard |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
[slackware-security] gnupg2 (SSA:2018-159-01)
New gnupg2 packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and - -current to fix a security issue.
Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/gnupg2-2.0.31-i586-1_slack14.2.txz: Upgraded. Sanitize the diagnostic output of the original file name in verbose mode. By using a made up file name in the message it was possible to fake status messages. Using this technique it was for example possible to fake the verification status of a signed mail. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12020 (* Security fix *) +--------------------------+
Where to find the new packages: +-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you.
Updated package for Slackware 13.37: gnupg2-2.0.31-i486-1_slack13.37.txz
Updated package for Slackware x86_64 13.37: gnupg2-2.0.31-x86_64-1_slack13.37.txz
Updated package for Slackware 14.0: gnupg2-2.0.31-i486-1_slack14.0.txz
Updated package for Slackware x86_64 14.0: gnupg2-2.0.31-x86_64-1_slack14.0.txz
Updated package for Slackware 14.1: gnupg2-2.0.31-i486-1_slack14.1.txz
Updated package for Slackware x86_64 14.1: gnupg2-2.0.31-x86_64-1_slack14.1.txz
Updated package for Slackware 14.2: gnupg2-2.0.31-i586-1_slack14.2.txz
Updated package for Slackware x86_64 14.2: gnupg2-2.0.31-x86_64-1_slack14.2.txz
Updated package for Slackware -current: gnupg2-2.2.8-i586-1.txz
Updated package for Slackware x86_64 -current: gnupg2-2.2.8-x86_64-1.txz
MD5 signatures: +-------------+
Slackware 13.37 package: 65c32255acff00361bd24e5353554c80 gnupg2-2.0.31-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: 7d03704928494b4c6b12d98c26de0a46 gnupg2-2.0.31-x86_64-1_slack13.37.txz
Slackware 14.0 package: d9f38f11df078182129e0059d49cf547 gnupg2-2.0.31-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: c32f666c0248264020f2a90e3510b1c2 gnupg2-2.0.31-x86_64-1_slack14.0.txz
Slackware 14.1 package: 54a17edf49c1fa17cb9be1c0213d37f9 gnupg2-2.0.31-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: fd5fd7da3a7cddc25a9b8beff8ed4bfc gnupg2-2.0.31-x86_64-1_slack14.1.txz
Slackware 14.2 package: 23ef6d14bbaf7c4d33dae51086a6396a gnupg2-2.0.31-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 12491aecdc47b0064974465969162a40 gnupg2-2.0.31-x86_64-1_slack14.2.txz
Slackware -current package: 5822b4be4db3c8512f44d843655fd363 n/gnupg2-2.2.8-i586-1.txz
Slackware x86_64 -current package: 379d6ef97f9d801bd112ceaef2ce0706 n/gnupg2-2.2.8-x86_64-1.txz
Installation instructions: +------------------------+
Upgrade the package as root: # upgradepkg gnupg2-2.0.31-i586-1_slack14.2.txz
+-----+
Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com
+------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+ -----BEGIN PGP SIGNATURE-----
iEYEARECAAYFAlsa5aMACgkQakRjwEAQIjNvzACfTTrbDsaA4EgYWMnZ6/UkGYft KaUAn2qvTksI9VVqKSDYBrEaoSDYx7r0 =IK/X -----END PGP SIGNATURE-----
|
|
|
|