Red Hat Security AdvisoryRHSA-2018:2181
gnupg2 security update
Released 2018-07-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gnupg2-2.0.22-5.el7_5
- Red Hat Enterprise Linux Client Optional (v. 7) gnupg2-smime-2.0.22-5.el7_5
- Red Hat Enterprise Linux ComputeNode (v. 7) gnupg2-2.0.22-5.el7_5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gnupg2-smime-2.0.22-5.el7_5
- Red Hat Enterprise Linux Server (v. 7) gnupg2-2.0.22-5.el7_5
- Red Hat Enterprise Linux Server Optional (v. 7) gnupg2-smime-2.0.22-5.el7_5
- Red Hat Enterprise Linux Workstation (v. 7) gnupg2-2.0.22-5.el7_5
- Red Hat Enterprise Linux Workstation Optional (v. 7) gnupg2-smime-2.0.22-5.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) gnupg2-2.0.22-5.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) gnupg2-smime-2.0.22-5.el7_5
Fixes 1 record
Priority MEDIUM 44
mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08247 · Published 2018-06-08 · Partial fix CWE-706
