1907 matches found
I'm giving up on PGP
After years of wrestling GnuPG with varying levels of enthusiasm, I came to the conclusion that it's just not worth it, and I'm giving up. At least on the concept of long term PGP keys. This is not about the gpg tool itself, or about tools at all. Many already wrote about that. It's about the lon...
GLSA-201612-01 : GnuPG: RNG output is predictable
The remote host is affected by the vulnerability described in GLSA-201612-01 GnuPG: RNG output is predictable A long standing bug since 1998 in Libgcrypt see GLSA 201610-04 below and GnuPG allows an attacker to predict the output from the standard RNG. Please review the Entropy Loss and Output...
GnuPG: RNG output is predictable
Background The GNU Privacy Guard, GnuPG, is a free replacement for the PGP suite of cryptographic software. Description A long standing bug since 1998 in Libgcrypt see “GLSA 201610-04” below and GnuPG allows an attacker to predict the output from the standard RNG. Please review the “Entropy Loss...
[SECURITY] Fedora 25 Update: mingw-nettle-3.3-1.fc25
Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages C++, Python, Pike, ..., in applications like LSH or GNUPG, or even in kernel space...
Fedora 25 : gnupg (2016-aab0a156ab)
New upstream v1.4.21 - Fix critical security bug in the RNG CVE-2016-6313 1366105 - Tweak default options for gpgv - By default do not anymore emit the GnuPG version with --armor Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...
Amazon Linux: Security Advisory (ALAS-2016-744)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
lib32-libgcrypt: information disclosure
Felix Drre and Vladimir Klebanov from the Karlsruhe Institute of Technology found a bug in the mixing functions of Libgcrypt's random number generator: An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. This bug exists since 1998 in all GnuPG and...
Amazon Linux AMI : libgcrypt / gnupg (ALAS-2016-744)
A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker who can obtain the first 580 bytes of the PRNG output can trivially predict the following 20 bytes. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Medium: libgcrypt, gnupg
Issue Overview: A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker who can obtain the first 580 bytes of the PRNG output can trivially predict the following 20 bytes. Affected Packages: libgcrypt, gnupg Issue Correction: Run yum update libgcrypt or yum updat...
Fedora 23 : gnupg (2016-3a0195918f)
New upstream v1.4.21 - Fix critical security bug in the RNG CVE-2016-6313 1366105 - Tweak default options for gpgv - By default do not anymore emit the GnuPG version with --armor Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...
[SECURITY] Fedora 23 Update: gnupg-1.4.21-1.fc23
GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...
Fedora Update for gnupg FEDORA-2016-3a0195918f
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SOL21284031 - GnuPG vulnerability CVE-2014-4617
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Updated gnupg/libgcrypt packages fix security vulnerability
Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG's random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output CVE-2016-6313. The gnupg package has been...
[SECURITY] Fedora 25 Update: gnupg-1.4.21-1.fc25
GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...
Debian DLA-602-1 : gnupg security and hardening update
CVE-2016-6313 Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG's random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. A first analysis on the impac...
[SECURITY] [DLA 602-1] gnupg security and hardening update
Package : gnupg Version : 1.4.12-7+deb7u8 CVE ID : CVE-2016-6313 Debian Bug : 834893 CVE-2016-6313 Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPGs random number generator. An attacker who obtains 4640 bits from the...
Fedora 24 : gnupg (2016-9864953aa3)
New upstream v1.4.21 - Fix critical security bug in the RNG CVE-2016-6313 1366105 - Tweak default options for gpgv - By default do not anymore emit the GnuPG version with --armor Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...
Fedora Update for gnupg FEDORA-2016-9864953aa3
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
