1914 matches found
Mandriva Linux Security Advisory : gnupg (MDVSA-2015:154)
Updated gnupg, gnupg2 and libgcrypt packages fix security vulnerabilities : GnuPG versions before 1.4.17 and 2.0.24 are vulnerable to a denial of service which can be caused by garbled compressed data packets which may put gpg into an infinite loop CVE-2014-4617. The libgcrypt library before...
Debian DLA-175-1 : gnupg security update
Multiple vulnerabilities were discovered in GnuPG, the GNU Privacy Guard : CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite...
Debian DLA-93-1 : libgcrypt11 security update
Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack see http://www.cs.tau.ac.il/tromer/handsoff/. This is fixed in Squeeze in version 1.4.5-2+squeeze...
Debian DLA-39-1 : gpgme1.0 security update
Tomas Trnka discovered a heap-based buffer overflow within the gpgsm status handler of GPGME, a library designed to make access to GnuPG easier for applications. An attacker could use this issue to cause an application using GPGME to crash denial of service or possibly to execute arbitrary code...
IT-Grundschutz M5.063: Einsatz von GnuPG oder PGP
IT-Grundschutz M5.063: Einsatz von GnuPG oder PGP. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM5063.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 5.063 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...
IT-Grundschutz M5.063: Einsatz von GnuPG oder PGP
IT-Grundschutz M5.063: Einsatz von GnuPG oder PGP. Stand: 14. Ergänzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...
[SECURITY] Fedora 21 Update: duplicity-0.6.25-3.fc21
Duplicity incrementally backs up files and directory by encrypting tar-format volumes with GnuPG and uploading them to a remote or local file server. In theory many protocols for connecting to a file server could be supported; so far ssh/scp, local file access, rsync, ftp, HSI, WebDAV and Amazon ...
[SECURITY] Fedora 20 Update: duplicity-0.6.25-3.fc20
Duplicity incrementally backs up files and directory by encrypting tar-format volumes with GnuPG and uploading them to a remote or local file server. In theory many protocols for connecting to a file server could be supported; so far ssh/scp, local file access, rsync, ftp, HSI, WebDAV and Amazon ...
[SECURITY] [DLA 175-1] gnupg security update
Package : gnupg Version : 1.4.10-4+squeeze7 CVE ID : CVE-2014-3591 CVE-2015-0837 CVE-2015-1606 Debian Bug : 778652 Multiple vulnerabilities were discovered in GnuPG, the GNU Privacy Guard: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by...
DLA-175-1 gnupg - security update
Bulletin has no description...
Fedora 20 : gnupg-1.4.19-2.fc20 (2015-3253)
New upstream v1.4.19 Use ciphertext blinding for Elgamal decryption CVE-2014-3591 Fixed data-dependent timing variations in modular exponentiation related to CVE-2015-0837 Add AUTOPOINT=true to autoreconf so that it will build with gettext 0.18.x Note that Tenable Network Security has extracted t...
Fedora 22 : gnupg-1.4.19-1.fc22 (2015-2872)
New upstream v1.4.19 - Use ciphertext blinding for Elgamal decryption CVE-2014-3591 - Fixed data-dependent timing variations in modular exponentiation related to CVE-2015-0837 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
[SECURITY] [DSA 3184-1] gnupg security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3184-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 12, 2015 http://www.debian.org/security/faq -...
Fedora Update for gnupg FEDORA-2015-3253
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 20 Update: gnupg-1.4.19-2.fc20
GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...
[SECURITY] Fedora 22 Update: gnupg-1.4.19-1.fc22
GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...
Debian DSA-3184-1 : gnupg - security update
Multiple vulnerabilities were discovered in GnuPG, the GNU Privacy Guard : - CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite...
[SECURITY] [DSA 3184-1] gnupg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3184-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 12, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3184-1 (gnupg - security update)
Multiple vulnerabilities were discovered in GnuPG, the GNU Privacy Guard: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite...