| Description: | Description:
The remote host is missing an update to gnupg
announced via advisory FEDORA-2006-755.
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and
creating digital signatures. GnuPG has advanced key management
capabilities and is compliant with the proposed OpenPGP Internet
standard described in RFC2440. Since GnuPG doesn't use any patented
algorithm, it is not compatible with any version of PGP2 (PGP2.x uses
only IDEA for symmetric-key encryption, which is patented worldwide).
Update Information:
This update upgrades to upstream version 1.4.4, which places
a limit on the size of user ID packets, closing a possible
integer overflow (CVE-2006-3082).
* Mon Jun 26 2006 Nalin Dahyabhai - 1.4.4-2
- rebuild
* Mon Jun 26 2006 Nalin Dahyabhai - 1.4.4-1
- update to 1.4.4
* Tue Jun 20 2006 Nalin Dahyabhai - 1.4.3-5
- rebuild
* Tue Jun 20 2006 Nalin Dahyabhai - 1.4.3-4
- add patch from upstream to fix CVE-2006-3082 (#195946)
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2006-755
Risk factor : Medium
CVSS Score:
5.0
|
