---------------------------------------------------------------------Fedora Update Notification
FEDORA-2006-867
2006-08-02
---------------------------------------------------------------------Product     : Fedora Core 4
Name        : gnupg
Version     : 1.4.5
Release     : 1
Summary     : A GNU utility for secure communication and data storage.
Description :
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and
creating digital signatures. GnuPG has advanced key management
capabilities and is compliant with the proposed OpenPGP Internet
standard described in RFC2440. Since GnuPG doesn't use any patented
algorithm, it is not compatible with any version of PGP2 (PGP2.x uses
only IDEA for symmetric-key encryption, which is patented worldwide).

---------------------------------------------------------------------Update Information:

This update upgrades GnuPG to version 1.4.5 to correct
errors in the parsing of certain types of packets.
---------------------------------------------------------------------* Tue Aug  1 2006 Nalin Dahyabhai  - 1.4.5-1
- update to 1.4.5, fixing additional size overflows in packet parsing (#200904,
  CVE-2006-3746)
- temporarily disable curl support again
* Fri Jul 28 2006 Nalin Dahyabhai  - 1.4.4.90-1
- update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90
  to avoid looking "newer" than the eventual 1.4.5
- because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT
* Thu Jul 20 2006 Nalin Dahyabhai  - 1.4.4-7
- add BuildPrereq on curl-devel to get curl's ipv6 support (#198375)
* Wed Jul 12 2006 Nalin Dahyabhai  - 1.4.4-6
- fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow
  detection (#198612)
* Wed Jul 12 2006 Jesse Keating  - 1.4.4-5.1
- rebuild
* Wed Jul  5 2006 Nalin Dahyabhai  - 1.4.4-5
- try again using per-platform buildprereq (jkeating)
* Wed Jul  5 2006 Nalin Dahyabhai  - 1.4.4-4
- buildprereq libusb-devel, so that we get CCID support back (#197450)

---------------------------------------------------------------------This update can be downloaded from:
    
26bc9d57735eb1c63ae4e1d55df54f5e5087eca6  SRPMS/gnupg-1.4.5-1.src.rpm
26bc9d57735eb1c63ae4e1d55df54f5e5087eca6  noarch/gnupg-1.4.5-1.src.rpm
4b41734de88e5971df3de2c300cd5b456fdbbb6c  ppc/gnupg-1.4.5-1.ppc.rpm
a94d164ae439ed9206d5a901ccba4460f54d663a  ppc/debug/gnupg-debuginfo-1.4.5-1.ppc.rpm
7b6e44243e938584f2eb156de9d6505016e0bd49  x86_64/gnupg-1.4.5-1.x86_64.rpm
9b4881a351a4f2773ebd646763c704ef9d9dd284  x86_64/debug/gnupg-debuginfo-1.4.5-1.x86_64.rpm
7c91efa6c1c1e69b99058985240a69fb027a1c05  i386/gnupg-1.4.5-1.i386.rpm
81699767c708a5e5fc16fb52a055e91c598b66aa  i386/debug/gnupg-debuginfo-1.4.5-1.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at .
---------------------------------------------------------------------_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce

Fedora Core 4 Update: gnupg-1.4.5-1

August 2, 2006
This update upgrades GnuPG to version 1.4.5 to correct errors in the parsing of certain types of packets.

Summary

GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and

creating digital signatures. GnuPG has advanced key management

capabilities and is compliant with the proposed OpenPGP Internet

standard described in RFC2440. Since GnuPG doesn't use any patented

algorithm, it is not compatible with any version of PGP2 (PGP2.x uses

only IDEA for symmetric-key encryption, which is patented worldwide).

This update upgrades GnuPG to version 1.4.5 to correct

errors in the parsing of certain types of packets.

- update to 1.4.5, fixing additional size overflows in packet parsing (#200904,

CVE-2006-3746)

- temporarily disable curl support again

* Fri Jul 28 2006 Nalin Dahyabhai - 1.4.4.90-1

- update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90

to avoid looking "newer" than the eventual 1.4.5

- because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT

* Thu Jul 20 2006 Nalin Dahyabhai - 1.4.4-7

- add BuildPrereq on curl-devel to get curl's ipv6 support (#198375)

* Wed Jul 12 2006 Nalin Dahyabhai - 1.4.4-6

- fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow

detection (#198612)

* Wed Jul 12 2006 Jesse Keating - 1.4.4-5.1

- rebuild

* Wed Jul 5 2006 Nalin Dahyabhai - 1.4.4-5

- try again using per-platform buildprereq (jkeating)

* Wed Jul 5 2006 Nalin Dahyabhai - 1.4.4-4

- buildprereq libusb-devel, so that we get CCID support back (#197450)

26bc9d57735eb1c63ae4e1d55df54f5e5087eca6 SRPMS/gnupg-1.4.5-1.src.rpm

26bc9d57735eb1c63ae4e1d55df54f5e5087eca6 noarch/gnupg-1.4.5-1.src.rpm

4b41734de88e5971df3de2c300cd5b456fdbbb6c ppc/gnupg-1.4.5-1.ppc.rpm

a94d164ae439ed9206d5a901ccba4460f54d663a ppc/debug/gnupg-debuginfo-1.4.5-1.ppc.rpm

7b6e44243e938584f2eb156de9d6505016e0bd49 x86_64/gnupg-1.4.5-1.x86_64.rpm

9b4881a351a4f2773ebd646763c704ef9d9dd284 x86_64/debug/gnupg-debuginfo-1.4.5-1.x86_64.rpm

7c91efa6c1c1e69b99058985240a69fb027a1c05 i386/gnupg-1.4.5-1.i386.rpm

81699767c708a5e5fc16fb52a055e91c598b66aa i386/debug/gnupg-debuginfo-1.4.5-1.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-package-announce

FEDORA-2006-867 2006-08-02 Name : gnupg Version : 1.4.5 Release : 1 Summary : A GNU utility for secure communication and data storage. Description : GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with any version of PGP2 (PGP2.x uses only IDEA for symmetric-key encryption, which is patented worldwide). This update upgrades GnuPG to version 1.4.5 to correct errors in the parsing of certain types of packets. - update to 1.4.5, fixing additional size overflows in packet parsing (#200904, CVE-2006-3746) - temporarily disable curl support again * Fri Jul 28 2006 Nalin Dahyabhai - 1.4.4.90-1 - update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90 to avoid looking "newer" than the eventual 1.4.5 - because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT * Thu Jul 20 2006 Nalin Dahyabhai - 1.4.4-7 - add BuildPrereq on curl-devel to get curl's ipv6 support (#198375) * Wed Jul 12 2006 Nalin Dahyabhai - 1.4.4-6 - fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow detection (#198612) * Wed Jul 12 2006 Jesse Keating - 1.4.4-5.1 - rebuild * Wed Jul 5 2006 Nalin Dahyabhai - 1.4.4-5 - try again using per-platform buildprereq (jkeating) * Wed Jul 5 2006 Nalin Dahyabhai - 1.4.4-4 - buildprereq libusb-devel, so that we get CCID support back (#197450) 26bc9d57735eb1c63ae4e1d55df54f5e5087eca6 SRPMS/gnupg-1.4.5-1.src.rpm 26bc9d57735eb1c63ae4e1d55df54f5e5087eca6 noarch/gnupg-1.4.5-1.src.rpm 4b41734de88e5971df3de2c300cd5b456fdbbb6c ppc/gnupg-1.4.5-1.ppc.rpm a94d164ae439ed9206d5a901ccba4460f54d663a ppc/debug/gnupg-debuginfo-1.4.5-1.ppc.rpm 7b6e44243e938584f2eb156de9d6505016e0bd49 x86_64/gnupg-1.4.5-1.x86_64.rpm 9b4881a351a4f2773ebd646763c704ef9d9dd284 x86_64/debug/gnupg-debuginfo-1.4.5-1.x86_64.rpm 7c91efa6c1c1e69b99058985240a69fb027a1c05 i386/gnupg-1.4.5-1.i386.rpm 81699767c708a5e5fc16fb52a055e91c598b66aa i386/debug/gnupg-debuginfo-1.4.5-1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce

Change Log

References

Update Instructions

Severity
Name : gnupg
Version : 1.4.5
Release : 1
Summary : A GNU utility for secure communication and data storage.

Related News

11.Locks IsometricPattern Esm H320
2 - 3 min read
The upcoming release of Linux Mint 22 will introduce significant changes, particularly in handling XApp , GNOME applications, and the Software
2.Motherboard Esm H320
2 - 3 min read
German software engineer Lennart Poettering recently presented run0 , a new tool in systemd v256 that aims to address the security concerns
22.Lock ScreenEffect Esm H320
2 - 3 min read
Red Hat recently released its newest enterprise Linux distro, Red Hat Enterprise Linux (RHEL) 9.4 , which introduces several features designed to
8.Locks HexConnections CodeGlobe Esm H320
1 - 2 min read
The latest release of Debian , one of the oldest and most trusted distributions within the Linux ecosystem, redefines security, stability, and
20.Lock AbstractDigital Circular Esm H320
1 - 2 min read
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server. The vulnerabilities affected
1.Penguin Landscape Esm H320
1 - 2 min read
A critical vulnerability was discovered in the Linux kernel's netfilter subsystem, specifically within the nf_tables component, posing potential
19.Laptop Bed Esm H320
2 - 3 min read
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw that can enable attackers to execute arbitrary
23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved