Red Hat Security AdvisoryRHSA-2013:1459
gnupg2 security update
Released 2013-10-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gnupg2-2.0.10-6.el5_10, gnupg2-2.0.10-6.el5_10.i386, gnupg2-2.0.10-6.el5_10.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) gnupg2-2.0.10-6.el5_10, gnupg2-2.0.10-6.el5_10.i386
- Red Hat Enterprise Linux Desktop (v. 6) gnupg2-2.0.14-6.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) gnupg2-2.0.14-6.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
- Red Hat Enterprise Linux Server (v. 6) gnupg2-2.0.14-6.el6_4
- Red Hat Enterprise Linux Server Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
- Red Hat Enterprise Linux Workstation (v. 6) gnupg2-2.0.14-6.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
Fixes 3 records
Priority LOW 31
The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0503 · Published 2013-10-28 · Fixed CWE-20
Priority LOW 31
GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic p…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2013-10-10 · Fixed CWE-310
Priority LOW 31
The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (applicatio…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02912 · Published 2013-01-24 · Fixed CWE-20
THREATIST.IORead the docs