gnupg security update

2006-07-1812:30:07

CentOS Project

lists.centos.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.741 High

EPSS

Percentile

98.1%

JSON

CentOS Errata and Security Advisory CESA-2006:0571

GnuPG is a utility for encrypting data and creating digital signatures.

An integer overflow flaw was found in GnuPG. An attacker could create a
carefully crafted message packet with a large length that could cause GnuPG
to crash or possibly overwrite memory when opened. (CVE-2006-3082)

All users of GnuPG are advised to upgrade to this updated package, which
contains a backported patch to correct this issue.

Affected packages:
gnupg

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0571

OSVersionArchitecturePackageVersionFilename
CentOS4ia64gnupg< 1.2.6-5gnupg-1.2.6-5.ia64.rpm
CentOS3ia64gnupg< 1.2.1-16gnupg-1.2.1-16.ia64.rpm
CentOS4alphagnupg< 1.2.6-5gnupg-1.2.6-5.alpha.rpm
CentOS3s390gnupg< 1.2.1-16gnupg-1.2.1-16.s390.rpm
CentOS3s390xgnupg< 1.2.1-16gnupg-1.2.1-16.s390x.rpm
CentOS4s390gnupg< 1.2.6-5gnupg-1.2.6-5.s390.rpm
CentOS4s390xgnupg< 1.2.6-5gnupg-1.2.6-5.s390x.rpm
CentOS4x86_64gnupg< 1.2.6-5gnupg-1.2.6-5.x86_64.rpm
CentOS4i386gnupg< 1.2.6-5gnupg-1.2.6-5.i386.rpm
CentOS3x86_64gnupg< 1.2.1-16gnupg-1.2.1-16.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	gnupg	< 1.2.6-5	gnupg-1.2.6-5.ia64.rpm
CentOS	3	ia64	gnupg	< 1.2.1-16	gnupg-1.2.1-16.ia64.rpm
CentOS	4	alpha	gnupg	< 1.2.6-5	gnupg-1.2.6-5.alpha.rpm
CentOS	3	s390	gnupg	< 1.2.1-16	gnupg-1.2.1-16.s390.rpm
CentOS	3	s390x	gnupg	< 1.2.1-16	gnupg-1.2.1-16.s390x.rpm
CentOS	4	s390	gnupg	< 1.2.6-5	gnupg-1.2.6-5.s390.rpm
CentOS	4	s390x	gnupg	< 1.2.6-5	gnupg-1.2.6-5.s390x.rpm
CentOS	4	x86_64	gnupg	< 1.2.6-5	gnupg-1.2.6-5.x86_64.rpm
CentOS	4	i386	gnupg	< 1.2.6-5	gnupg-1.2.6-5.i386.rpm
CentOS	3	x86_64	gnupg	< 1.2.1-16	gnupg-1.2.1-16.x86_64.rpm