Red Hat Security AdvisoryRHSA-2020:4490
gnupg2 security, bug fix, and enhancement update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) gnupg2-2.2.20-2.el8, gnupg2-smime-2.2.20-2.el8
Fixes 2 records
Priority MEDIUM 40
GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01041 · Published 2018-12-20 · Fixed CWE-352
Priority LOW 38
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver networ…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02545 · Published 2019-06-29 · Partial fix CWE-295
