Sicherheit: Mangelnde Fehlerbehandlung in gnupg
Aktuelle Meldungen Distributionen
Name: Mangelnde Fehlerbehandlung in gnupg
ID: FEDORA-2006-116
Distribution: Fedora
Plattformen: Fedora Core 4
Datum: Fr, 17. Februar 2006, 20:30
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0455
Applikationen: The GNU Privacy Guard


Fedora Update Notification

Product : Fedora Core 4
Name : gnupg
Version :
Release : 1
Summary : A GNU utility for secure communication and data storage.
Description :
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and
creating digital signatures. GnuPG has advanced key management
capabilities and is compliant with the proposed OpenPGP Internet
standard described in RFC2440. Since GnuPG doesn't use any patented
algorithm, it is not compatible with any version of PGP2 (PGP2.x uses
only IDEA for symmetric-key encryption, which is patented worldwide).

Update Information:

The GNU Privacy Guard provides encryption and signing for
messages and arbitrary files, and implements the OpenPGP
standard as described by IETF RFC2440.

Version 1.4.2 of GnuPG would in some cases erroneously exit
with status 0 (signalling no errors) if it was invoked to
check a signature but found no signature to check. This
should be corrected in version
* Wed Feb 15 2006 Nalin Dahyabhai <nalin@redhat.com> -
- update to (fixes CVE-2006-0455)
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.4.2-3.2.1
- bump again for double-long bug on ppc(64)
* Tue Feb 7 2006 Jesse Keating <jkeating@redhat.com> - 1.4.2-3.2
- rebuilt for new gcc4.1 snapshot and glibc changes
* Fri Dec 9 2005 Jesse Keating <jkeating@redhat.com>
- rebuilt
* Tue Aug 9 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
- don't override libexecdir any more; we don't need to (#165462)
* Thu Aug 4 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
- pull in David Shaw's fix for key generation in batch mode
* Fri Jul 29 2005 Nalin Dahyabhai <nalin@redhat.com>
- change %post to check if the info files are there before attempting to
add or remove them from the info index (#91641)
* Wed Jul 27 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-1
- update to 1.4.2

This update can be downloaded from:

a1a4ce41efd41cb8ade2b4413072fb4c00e8b9e3 SRPMS/gnupg-
1be912b956a9c001a8a24a4cadbaee4351710bfb ppc/gnupg-
5dd455f66408bb0b1a5080077595f45e14848fd7 x86_64/gnupg-
601f36c75b78f96fe1d921edde19343997b3827e i386/gnupg-

This update can be installed with the 'yum' update program. Use
'yum update
package-name' at the command line. For more information, refer to
Software with yum,' available at http://fedora.redhat.com/docs/yum/.

fedora-announce-list mailing list
Pro-Linux @Facebook
Neue Nachrichten