Mageia: Security Advisory (MGASA-2020-0425)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated kleopatra packages fix a security vulnerability

The Kleopatra component before 20.07.80 for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary library. CVE-2020-24972...

OPENSUSE-SU-2020:1754-1 Security update for kleopatra

This update for kleopatra fixes the following issues: - CVE-2020-24972: Add upstream patch to prevent potential arbitrary code execution boo1177932: This update was imported from the openSUSE:Leap:15.1:Update update project...

Security update for kleopatra (moderate)

openSUSE Security Update: Security update for kleopatra Announcement ID: openSUSE-SU-2020:1754-1 Rating: moderate References: 1177932 Cross-References: CVE-2020-24972 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update...

openSUSE Security Update : kleopatra (openSUSE-2020-1723)

This update for kleopatra fixes the following issues : - CVE-2020-24972: Add upstream patch to prevent potential arbitrary code execution boo1177932 : C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE: Security Advisory for kleopatra (openSUSE-SU-2020:1723-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1723-1 Security update for kleopatra

This update for kleopatra fixes the following issues: - CVE-2020-24972: Add upstream patch to prevent potential arbitrary code execution boo1177932:...

Security update for kleopatra (moderate)

openSUSE Security Update: Security update for kleopatra Announcement ID: openSUSE-SU-2020:1723-1 Rating: moderate References: 1177932 Cross-References: CVE-2020-24972 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Fedora 32 : kleopatra (2020-9b441d3153)

Security fix for CVE-2020-24972 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

CVE-2020-24972

CVE-2020-24972 affects Kleopatra prior to 3.1.12 (and prior to 20.07.80) for GnuPG. The flaw allows remote code execution via openpgp4fpr: URLs being processed without safe handling of command-line options; the Qt platformpluginpath option can load an arbitrary DLL. Multiple vendor advisories (op...