[SECURITY] Fedora Core 5 Test Update: gnupg-1.4.4-2

Nalin Dahyabhai nalin at redhat.com
Mon Jun 26 23:10:18 UTC 2006


---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2006-755
2006-06-26
---------------------------------------------------------------------

Product     : Fedora Core 5
Name        : gnupg
Version     : 1.4.4
Release     : 2
Summary     : A GNU utility for secure communication and data storage.
Description :
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and
creating digital signatures. GnuPG has advanced key management
capabilities and is compliant with the proposed OpenPGP Internet
standard described in RFC2440. Since GnuPG doesn't use any patented
algorithm, it is not compatible with any version of PGP2 (PGP2.x uses
only IDEA for symmetric-key encryption, which is patented worldwide).

---------------------------------------------------------------------
Update Information:

This update upgrades to upstream version 1.4.4, which places
a limit on the size of user ID packets, closing a possible
integer overflow (CVE-2006-3082).

Barring newly-discovered bugs in this update, it will be
moved from Testing to Final on or about 28 June.
---------------------------------------------------------------------
* Mon Jun 26 2006 Nalin Dahyabhai <nalin at redhat.com> - 1.4.4-2
- rebuild
* Mon Jun 26 2006 Nalin Dahyabhai <nalin at redhat.com> - 1.4.4-1
- update to 1.4.4
* Tue Jun 20 2006 Nalin Dahyabhai <nalin at redhat.com> - 1.4.3-5
- rebuild
* Tue Jun 20 2006 Nalin Dahyabhai <nalin at redhat.com> - 1.4.3-4
- add patch from upstream to fix CVE-2006-3082 (#195946)

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/5/

06e7606df86cf41984e2c8d08beb2965562743f9  SRPMS/gnupg-1.4.4-2.src.rpm
06e7606df86cf41984e2c8d08beb2965562743f9  noarch/gnupg-1.4.4-2.src.rpm
e55bfe78bad29e842e84c6c781541bc405dddeb3  ppc/debug/gnupg-debuginfo-1.4.4-2.ppc.rpm
3cf0a382c2a50ce5baadd84bd48f754ec4020f2e  ppc/gnupg-1.4.4-2.ppc.rpm
0d25cb860c911e33064d254bb224e8c17e71b4c4  x86_64/debug/gnupg-debuginfo-1.4.4-2.x86_64.rpm
68660ceaadf5863ab0769e3d66119e22297dca90  x86_64/gnupg-1.4.4-2.x86_64.rpm
292638fa778b4e2f096a6fcf0bc5f73f93e57750  i386/gnupg-1.4.4-2.i386.rpm
e321f9b2719c2c763a87f5802beaf1a9ef1c3a90  i386/debug/gnupg-debuginfo-1.4.4-2.i386.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------




More information about the fedora-test-list mailing list