Red Hat Security AdvisoryRHSA-2006:0266
gnupg security update
Released 2006-03-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 gnupg-1.2.1-15, gnupg-1.2.1-15.i386
- Red Hat Enterprise Linux AS version 3 gnupg-1.2.1-15, gnupg-1.2.1-15.i386, gnupg-1.2.1-15.ia64 +1
- Red Hat Enterprise Linux AS version 4 gnupg-1.2.6-3, gnupg-1.2.6-3.i386, gnupg-1.2.6-3.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 gnupg-1.2.6-3, gnupg-1.2.6-3.i386
- Red Hat Enterprise Linux ES version 3 gnupg-1.2.1-15, gnupg-1.2.1-15.i386, gnupg-1.2.1-15.ia64
- Red Hat Enterprise Linux ES version 4 gnupg-1.2.6-3, gnupg-1.2.6-3.i386, gnupg-1.2.6-3.ia64
- Red Hat Enterprise Linux WS version 3 gnupg-1.2.1-15, gnupg-1.2.1-15.i386, gnupg-1.2.1-15.ia64
- Red Hat Enterprise Linux WS version 4 gnupg-1.2.6-3, gnupg-1.2.6-3.i386, gnupg-1.2.6-3.ia64
Fixes 2 records
Priority LOW 27
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for conc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0243 · Published 2006-03-13 · Fixed
Priority LOW 24
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpg…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.01359 · Published 2006-02-15 · Fixed
