Paketname
gnupg
Datum
2006-02-17
Advisory ID
MDKSA-2006:043
Betroffene Versionen
MNF2.0 i586 , 2006.0 i586 , CS2.1 i586 , 10.2 i586 , 10.1 i586 , CS2.1 x86_64 , CS3.0 x86_64 , CS3.0 i586 , 10.2 x86_64 , 2006.0 x86_64 , 10.1 x86_64

Problembeschreibung

Tavis Ormandy discovered it is possible to make gpg incorrectly
return success when verifying an invalid signature file.

The updated packages have been patched to address this issue.

Aktualisierte Pakete

MNF2.0 i586

 3a8c3c898241fe26d7d993f5a7387f65  mnf/2.0/RPMS/gnupg-1.2.4-1.2.M20mdk.i586.rpm
 18690f96b6fa8b0d31c23e2dc270b94e  mnf/2.0/SRPMS/gnupg-1.2.4-1.2.M20mdk.src.rpm

2006.0 i586

 71f92541420f6c3a23d2495719386752  2006.0/RPMS/gnupg-1.4.2-2.1.20060mdk.i586.rpm
 3125bd04850ca8783acf6209af5e5566  2006.0/SRPMS/gnupg-1.4.2-2.1.20060mdk.src.rpm

CS2.1 i586

 4c6841d5f28eddf14dc142cbd7e922e1  corporate/2.1/RPMS/gnupg-1.0.7-3.4.C21mdk.i586.rpm
 0976dbd29fece66598e4cec6e6753071  corporate/2.1/SRPMS/gnupg-1.0.7-3.4.C21mdk.src.rpm

10.2 i586

 e2c3c3d9c67282a9b47fe9d85a0c6ed5  10.2/RPMS/gnupg-1.4.0-4.1.102mdk.i586.rpm
 7c7cbcd6405c7eaaa9c441decaf103c3  10.2/SRPMS/gnupg-1.4.0-4.1.102mdk.src.rpm

10.1 i586

 5d18d12ad040377708e5b76397edea3d  10.1/RPMS/gnupg-1.2.4-1.2.101mdk.i586.rpm
 d60929578b66abf129fe774abcb3365b  10.1/SRPMS/gnupg-1.2.4-1.2.101mdk.src.rpm

CS2.1 x86_64

 43023e526548b3311c8a38952fd563a9  x86_64/corporate/2.1/RPMS/gnupg-1.0.7-3.4.C21mdk.x86_64.rpm
 0976dbd29fece66598e4cec6e6753071  x86_64/corporate/2.1/SRPMS/gnupg-1.0.7-3.4.C21mdk.src.rpm

CS3.0 x86_64

 87457273661e65f64d6386671899040a  x86_64/corporate/3.0/RPMS/gnupg-1.2.4-1.2.C30mdk.x86_64.rpm
 872548e5392b8aac650f5e586bafde63  x86_64/corporate/3.0/SRPMS/gnupg-1.2.4-1.2.C30mdk.src.rpm

CS3.0 i586

 333e703b0c5db15252f1ed62df26f387  corporate/3.0/RPMS/gnupg-1.2.4-1.2.C30mdk.i586.rpm
 872548e5392b8aac650f5e586bafde63  corporate/3.0/SRPMS/gnupg-1.2.4-1.2.C30mdk.src.rpm

10.2 x86_64

 b71f0376a3508a112b29508c2815bd2d  x86_64/10.2/RPMS/gnupg-1.4.0-4.1.102mdk.x86_64.rpm
 7c7cbcd6405c7eaaa9c441decaf103c3  x86_64/10.2/SRPMS/gnupg-1.4.0-4.1.102mdk.src.rpm

2006.0 x86_64

 9605f734fe6b9bc1c64f45a1582b2a0b  x86_64/2006.0/RPMS/gnupg-1.4.2-2.1.20060mdk.x86_64.rpm
 3125bd04850ca8783acf6209af5e5566  x86_64/2006.0/SRPMS/gnupg-1.4.2-2.1.20060mdk.src.rpm

10.1 x86_64

 3f3cff6c5a6fb9a5abe815c8e2e22774  x86_64/10.1/RPMS/gnupg-1.2.4-1.2.101mdk.x86_64.rpm
 d60929578b66abf129fe774abcb3365b  x86_64/10.1/SRPMS/gnupg-1.2.4-1.2.101mdk.src.rpm

Referenzen