To: [email protected]Subject: [ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability
Date: Tue, 20 Jun 2006 19:18:00 -0600
From: [email protected]
Reply-To: <xsecurity@mandriva.com.>
Message-Id: <E1FsrM0-0002Z6-SE@mercury.mandriva.com.>
Sender: QATeam User <qateam@mercury.mandriva.com.>
X-Virus-Scanned: antivirus-gw at tyumen.ru
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2006:110
http://www.mandriva.com/security/
_______________________________________________________________________
Package : gnupg
Date : June 20, 2006
Affected: 10.2, 2006.0, Corporate 3.0, Multi Network Firewall 2.0
_______________________________________________________________________
Problem Description:
A vulnerability was discovered in GnuPG 1.4.3 and 1.9.20 (and earlier)
that could allow a remote attacker to cause gpg to crash and possibly
overwrite memory via a message packet with a large length.
The updated packages have been patched to correct these issues.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3082
_______________________________________________________________________
Updated Packages:
Mandriva Linux 10.2:
d3a12d93b7bbe542458348cc51dcead8 10.2/RPMS/gnupg-1.4.2.2-0.2.102mdk.i586.rpm
731dc939288445076650464d2e00ac87 10.2/SRPMS/gnupg-1.4.2.2-0.2.102mdk.src.rpm
Mandriva Linux 10.2/X86_64:
0e39c1d095a27e35a6e8f76899e27628 x86_64/10.2/RPMS/gnupg-1.4.2.2-0.2.102mdk.x86_64.rpm
731dc939288445076650464d2e00ac87 x86_64/10.2/SRPMS/gnupg-1.4.2.2-0.2.102mdk.src.rpm
Mandriva Linux 2006.0:
a58b87cc4962c958d2b5ab8ce6ff2af0 2006.0/RPMS/gnupg-1.4.2.2-0.2.20060mdk.i586.rpm
629ccc307a6b0ba7a6b20e4e0c293594 2006.0/RPMS/gnupg2-1.9.16-4.1.20060mdk.i586.rpm
c4e6a135b2a74c3b753636fdb7459183 2006.0/SRPMS/gnupg-1.4.2.2-0.2.20060mdk.src.rpm
f81f714630d5ea3516f619e532bdf407 2006.0/SRPMS/gnupg2-1.9.16-4.1.20060mdk.src.rpm
Mandriva Linux 2006.0/X86_64:
600e6b7de637676c066f716ad8927acc x86_64/2006.0/RPMS/gnupg-1.4.2.2-0.2.20060mdk.x86_64.rpm
947ef9f61b86dc0e53b926545da1dc5c x86_64/2006.0/RPMS/gnupg2-1.9.16-4.1.20060mdk.x86_64.rpm
c4e6a135b2a74c3b753636fdb7459183 x86_64/2006.0/SRPMS/gnupg-1.4.2.2-0.2.20060mdk.src.rpm
f81f714630d5ea3516f619e532bdf407 x86_64/2006.0/SRPMS/gnupg2-1.9.16-4.1.20060mdk.src.rpm
Corporate 3.0:
b6749396abd547f862babb262b20a6a0 corporate/3.0/RPMS/gnupg-1.4.2.2-0.2.C30mdk.i586.rpm
d1562a6ce6f3f1e995cbceb39e4d4760 corporate/3.0/SRPMS/gnupg-1.4.2.2-0.2.C30mdk.src.rpm
Corporate 3.0/X86_64:
d5d73bc8f01dab03beba0b305d5d1ecb x86_64/corporate/3.0/RPMS/gnupg-1.4.2.2-0.2.C30mdk.x86_64.rpm
d1562a6ce6f3f1e995cbceb39e4d4760 x86_64/corporate/3.0/SRPMS/gnupg-1.4.2.2-0.2.C30mdk.src.rpm
Multi Network Firewall 2.0:
610a0a00957c503172904a054cc98a2a mnf/2.0/RPMS/gnupg-1.4.2.2-0.2.M20mdk.i586.rpm
3291b35f3c2c2fdafc42d8fc8f7062da mnf/2.0/SRPMS/gnupg-1.4.2.2-0.2.M20mdk.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
iD8DBQFEmHEJmqjQ0CJFipgRAtVCAKCyVLFVCZTrQGcpPAQYz6c3iZEjPgCgqpX0
GuOteS9filZcv68pum5+BeU=
=ywCK
-----END PGP SIGNATURE-----
