Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in gnupg
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in gnupg
ID: MDKSA-2006:110
Distribution: Mandriva
Plattformen: Mandriva Corporate 3.0, Mandriva 10.2, Mandriva Multi Network Firewall 2.0, Mandriva 2006.0
Datum: Mi, 21. Juni 2006, 03:27
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3082
Applikationen: The GNU Privacy Guard

Originalnachricht

This is a multi-part message in MIME format...

------------=_1150853221-2181-1787


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:110
http://www.mandriva.com/security/
_______________________________________________________________________

Package : gnupg
Date : June 20, 2006
Affected: 10.2, 2006.0, Corporate 3.0, Multi Network Firewall 2.0
_______________________________________________________________________

Problem Description:

A vulnerability was discovered in GnuPG 1.4.3 and 1.9.20 (and earlier)
that could allow a remote attacker to cause gpg to crash and possibly
overwrite memory via a message packet with a large length.

The updated packages have been patched to correct these issues.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3082
_______________________________________________________________________

Updated Packages:

Mandriva Linux 10.2:
d3a12d93b7bbe542458348cc51dcead8 10.2/RPMS/gnupg-1.4.2.2-0.2.102mdk.i586.rpm
731dc939288445076650464d2e00ac87 10.2/SRPMS/gnupg-1.4.2.2-0.2.102mdk.src.rpm

Mandriva Linux 10.2/X86_64:
0e39c1d095a27e35a6e8f76899e27628
x86_64/10.2/RPMS/gnupg-1.4.2.2-0.2.102mdk.x86_64.rpm
731dc939288445076650464d2e00ac87
x86_64/10.2/SRPMS/gnupg-1.4.2.2-0.2.102mdk.src.rpm

Mandriva Linux 2006.0:
a58b87cc4962c958d2b5ab8ce6ff2af0
2006.0/RPMS/gnupg-1.4.2.2-0.2.20060mdk.i586.rpm
629ccc307a6b0ba7a6b20e4e0c293594
2006.0/RPMS/gnupg2-1.9.16-4.1.20060mdk.i586.rpm
c4e6a135b2a74c3b753636fdb7459183
2006.0/SRPMS/gnupg-1.4.2.2-0.2.20060mdk.src.rpm
f81f714630d5ea3516f619e532bdf407
2006.0/SRPMS/gnupg2-1.9.16-4.1.20060mdk.src.rpm

Mandriva Linux 2006.0/X86_64:
600e6b7de637676c066f716ad8927acc
x86_64/2006.0/RPMS/gnupg-1.4.2.2-0.2.20060mdk.x86_64.rpm
947ef9f61b86dc0e53b926545da1dc5c
x86_64/2006.0/RPMS/gnupg2-1.9.16-4.1.20060mdk.x86_64.rpm
c4e6a135b2a74c3b753636fdb7459183
x86_64/2006.0/SRPMS/gnupg-1.4.2.2-0.2.20060mdk.src.rpm
f81f714630d5ea3516f619e532bdf407
x86_64/2006.0/SRPMS/gnupg2-1.9.16-4.1.20060mdk.src.rpm

Corporate 3.0:
b6749396abd547f862babb262b20a6a0
corporate/3.0/RPMS/gnupg-1.4.2.2-0.2.C30mdk.i586.rpm
d1562a6ce6f3f1e995cbceb39e4d4760
corporate/3.0/SRPMS/gnupg-1.4.2.2-0.2.C30mdk.src.rpm

Corporate 3.0/X86_64:
d5d73bc8f01dab03beba0b305d5d1ecb
x86_64/corporate/3.0/RPMS/gnupg-1.4.2.2-0.2.C30mdk.x86_64.rpm
d1562a6ce6f3f1e995cbceb39e4d4760
x86_64/corporate/3.0/SRPMS/gnupg-1.4.2.2-0.2.C30mdk.src.rpm

Multi Network Firewall 2.0:
610a0a00957c503172904a054cc98a2a
mnf/2.0/RPMS/gnupg-1.4.2.2-0.2.M20mdk.i586.rpm
3291b35f3c2c2fdafc42d8fc8f7062da
mnf/2.0/SRPMS/gnupg-1.4.2.2-0.2.M20mdk.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEmHEJmqjQ0CJFipgRAtVCAKCyVLFVCZTrQGcpPAQYz6c3iZEjPgCgqpX0
GuOteS9filZcv68pum5+BeU=
=ywCK
-----END PGP SIGNATURE-----


------------=_1150853221-2181-1787
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1150853221-2181-1787--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung