Mageia alert MGASA-2015-0359 (gnupg)

\n\n

From:
       
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
       
 
updates-announce@ml.mageia.org 
Subject:
        
 
[updates-announce] MGASA-2015-0359: Updated gnupg packages fix security vulnerabilities 
Date:
        
 
Sun, 13 Sep 2015 23:58:57 +0200
Message-ID:
         
 
<20150913215857.A081059402@valstar.mageia.org>
MGASA-2015-0359 - Updated gnupg packages fix security vulnerabilities

Publication date: 13 Sep 2015\nURL: http://advisories.mageia.org/MGASA-2015-0359.html
Type: security
Affected Mageia releases: 4
CVE: CVE-2015-1606,
     CVE-2015-1607

Description:
Updated gnupg and gnupg2 packages fix security vulnerabilities:

Hanno Böck discovered that GnuPG incorrectly handled certain malformed
keyrings. If a user or automated system were tricked into opening a
malformed keyring, a remote attacker could use this issue to cause GnuPG to
crash, resulting in a denial of service, or possibly execute arbitrary
code (CVE-2015-1606, CVE-2015-1607).

References:
- https://bugs.mageia.org/show_bug.cgi?id=15483
- http://www.ubuntu.com/usn/usn-2554-1/
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1606
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1607

SRPMS:
- 4/core/gnupg-1.4.16-1.3.mga4\n- 4/core/gnupg2-2.0.22-3.2.mga4