drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in gnupg
Name: |
Denial of Service in gnupg |
|
ID: |
MDVSA-2013:001 |
|
Distribution: |
Mandriva |
|
Plattformen: |
Mandriva Enterprise Server 5.0, Mandriva 2011 |
|
Datum: |
Mi, 2. Januar 2013, 16:36 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6085 |
|
Applikationen: |
The GNU Privacy Guard |
|
Originalnachricht |
This is a multi-part message in MIME format...
------------=_1357140787-3376-39
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2013:001 http://www.mandriva.com/security/ _______________________________________________________________________
Package : gnupg Date : January 2, 2013 Affected: 2011., Enterprise Server 5.0 _______________________________________________________________________
Problem Description:
A vulnerability has been found and corrected in gnupg: Versions of GnuPG <= 1.4.12 are vulnerable to memory access violations and public keyring database corruption when importing public keys that have been manipulated. An OpenPGP key can be fuzzed in such a way that gpg segfaults (or has other memory access violations) when importing the key (CVE-2012-6085). The updated packages have been patched to correct this issue. _______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6085 _______________________________________________________________________
Updated Packages:
Mandriva Linux 2011: b8e6c5c3a7f6a15b92bff451f836b458 2011/i586/gnupg-1.4.11-2.1-mdv2011.0.i586.rpm 584675a7e67f88f9c9ca32f1de09d668 2011/i586/gnupg2-2.0.18-1.1-mdv2011.0.i586.rpm 6e9756f40aba0d27a6c6253fcd6eefa8 2011/SRPMS/gnupg-1.4.11-2.1.src.rpm ee36fe03cc16a6f2082469646a41cd7b 2011/SRPMS/gnupg2-2.0.18-1.1.src.rpm
Mandriva Linux 2011/X86_64: 3ec09c0d350970b4f28bfa1a27210f7a 2011/x86_64/gnupg-1.4.11-2.1-mdv2011.0.x86_64.rpm 193a7293fb3768d76919fa23b9a2e5f9 2011/x86_64/gnupg2-2.0.18-1.1-mdv2011.0.x86_64.rpm 6e9756f40aba0d27a6c6253fcd6eefa8 2011/SRPMS/gnupg-1.4.11-2.1.src.rpm ee36fe03cc16a6f2082469646a41cd7b 2011/SRPMS/gnupg2-2.0.18-1.1.src.rpm
Mandriva Enterprise Server 5: 87cf2d237da632f3238cadd38df047a9 mes5/i586/gnupg-1.4.9-5.1mdvmes5.2.i586.rpm b403c6bb18eb638bb55de58b4e643537 mes5/i586/gnupg2-2.0.9-3.2mdvmes5.2.i586.rpm 8a02c74da7cd60b3367c823c58a9f4f6 mes5/SRPMS/gnupg-1.4.9-5.1mdvmes5.2.src.rpm 14456c77033667a50acc0454f9a4b1fc mes5/SRPMS/gnupg2-2.0.9-3.2mdvmes5.2.src.rpm
Mandriva Enterprise Server 5/X86_64: fdade2d1f0e52a24cb25a92f38f0541f mes5/x86_64/gnupg-1.4.9-5.1mdvmes5.2.x86_64.rpm e9cbaef434f1c2366c9481c4ea81fb71 mes5/x86_64/gnupg2-2.0.9-3.2mdvmes5.2.x86_64.rpm 8a02c74da7cd60b3367c823c58a9f4f6 mes5/SRPMS/gnupg-1.4.9-5.1mdvmes5.2.src.rpm 14456c77033667a50acc0454f9a4b1fc mes5/SRPMS/gnupg2-2.0.9-3.2mdvmes5.2.src.rpm _______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com _______________________________________________________________________
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)
iD8DBQFQ5CX+mqjQ0CJFipgRAgNyAKCOlhH6+HH5f4q73bu0nP0hv0BG3QCgviNu /kShpfBT134A864GMaRQlwc= =AVSl -----END PGP SIGNATURE-----
------------=_1357140787-3376-39 Content-Type: text/plain; charset="UTF-8"; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa@mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://store.mandriva.com _______________________________________________________
------------=_1357140787-3376-39--
|
|
|
|