Security fix for the ALT Linux 7 package gnupg version 1.4.15-alt1

1.4.15-alt1 built Oct. 26, 2013 Dmitry V. Levin in task 107171 Oct. 5, 2013 Dmitry V. Levin - Updated to 1.4.15 fixes CVE-2013-4402...

Security fix for the ALT Linux 7 package gnupg2 version 2.0.22-alt1

2.0.22-alt1 built Oct. 26, 2013 Dmitry V. Levin in task 107171 Oct. 5, 2013 Dmitry V. Levin - Updated to 2.0.22 fixes CVE-2013-4402...

RHEL 5 / 6 : gnupg2 (RHSA-2013:1459)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1459 advisory. The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with the proposed OpenPGP...

Oracle Linux 5 : gnupg (ELSA-2013-1458)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-1458 advisory. - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation - fix...

SuSE 11.2 / 11.3 Security Update : gpg2 (SAT Patch Numbers 8426 / 8427)

This GnuPG update fixes two security issues : - GnuPG treated no-usage-permitted keys as all-usages-permitted. CVE-2013-4351 - An infinite recursion in the compressed packet parser was fixed. CVE-2013-4402 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

gnupg2 security update

CentOS Errata and Security Advisory CESA-2013:1459 An updated gnupg2 package that fixes three security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...

gnupg2 security update

2.0.14-6 - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted 2.0.14-5 - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser...

gnupg security update

1.4.5-18 - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted 1.4.5-17 - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation - fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack - fix CVE-2013-4402 GnuPG: infinite recursion in the...

Medium: gnupg

Issue Overview: GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared no usage permitted as if it has all bits set all usage permitted, which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey. The compressed...

Medium: gnupg2

Issue Overview: GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared no usage permitted as if it has all bits set all usage permitted, which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey. The compressed...

Fedora Update for gnupg FEDORA-2013-18676

Check for the Version of gnupg OpenVAS Vulnerability Test Fedora Update for gnupg FEDORA-2013-18676 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for gnupg2 FEDORA-2013-18807

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for gnupg FEDORA-2013-18676

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : gnupg-1.4.15-1.fc19 (2013-18676)

CVE-2013-4351 - CVE-2013-4402 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Debian DSA-2774-1 : gnupg2 - several vulnerabilities

Two vulnerabilities were discovered in GnuPG 2, the GNU privacy guard, a free PGP replacement. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-4351 When a key or subkey had its 'key flags' subpacket set to all bits off, GnuPG currently would treat t...

Fedora 20 : gnupg-1.4.15-1.fc20 (2013-18543)

CVE-2013-4351 - CVE-2013-4402 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Debian DSA-2773-1 : gnupg - several vulnerabilities

Two vulnerabilities were discovered in GnuPG, the GNU privacy guard, a free PGP replacement. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-4351 When a key or subkey had its 'key flags' subpacket set to all bits off, GnuPG currently would treat the...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : gnupg, gnupg2 vulnerabilities (USN-1987-1)

Daniel Kahn Gillmor discovered that GnuPG treated keys with empty usage flags as being valid for all usages. CVE-2013-4351 Taylor R Campbell discovered that GnuPG incorrectly handled certain OpenPGP messages. If a user or automated system were tricked into processing a specially crafted message,...

Debian Security Advisory DSA 2774-1 (gnupg2 - several vulnerabilities)

Two vulnerabilities were discovered in GnuPG 2, the GNU privacy guard, a free PGP replacement. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-4351When a key or subkey had its key flags subpacket set to all bits off, GnuPG currently would treat the key...

DSA-2773-1 gnupg - several

Bulletin has no description...