Red Hat Security AdvisoryRHSA-2006:0754
gnupg security update
Released 2006-12-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 gnupg-1.2.1-19, gnupg-1.2.1-19.i386
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 gnupg-1.0.7-20, gnupg-1.0.7-20.i386, gnupg-1.0.7-20.ia64
- Red Hat Enterprise Linux AS version 3 gnupg-1.2.1-19, gnupg-1.2.1-19.i386, gnupg-1.2.1-19.ia64 +1
- Red Hat Enterprise Linux AS version 4 gnupg-1.2.6-8, gnupg-1.2.6-8.i386, gnupg-1.2.6-8.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 gnupg-1.2.6-8, gnupg-1.2.6-8.i386
- Red Hat Enterprise Linux ES version 2.1 gnupg-1.0.7-20, gnupg-1.0.7-20.i386
- Red Hat Enterprise Linux ES version 3 gnupg-1.2.1-19, gnupg-1.2.1-19.i386, gnupg-1.2.1-19.ia64
- Red Hat Enterprise Linux ES version 4 gnupg-1.2.6-8, gnupg-1.2.6-8.i386, gnupg-1.2.6-8.ia64
- Red Hat Enterprise Linux WS version 2.1 gnupg-1.0.7-20, gnupg-1.0.7-20.i386
- Red Hat Enterprise Linux WS version 3 gnupg-1.2.1-19, gnupg-1.2.1-19.i386, gnupg-1.2.1-19.ia64
- Red Hat Enterprise Linux WS version 4 gnupg-1.2.6-8, gnupg-1.2.6-8.i386, gnupg-1.2.6-8.ia64
- Red Hat Linux Advanced Workstation 2.1 gnupg-1.0.7-20, gnupg-1.0.7-20.ia64
Fixes 2 records
Priority MEDIUM 52
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a funct…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06231 · Published 2006-12-07 · Fixed
Priority LOW 36
Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions,…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03464 · Published 2006-11-29 · Fixed
