Secunia Logo  
 
Debian update for gnupg
Secunia Advisory: SA19234
Release Date: 2006-03-13
Popularity: 5,498 views

Critical:
Moderately critical
Impact: Security Bypass
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 3.1
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-0049


Description:
Debian has issued an update for gnupg. This fixes a vulnerability, which can be exploited by malicious people to bypass certain security restrictions.

For more information:
SA19173

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sarge3.dsc
Size/MD5 checksum: 680 8f2f1848dcdfe9d143d8e9352ef918ca
http://security.debian.org/pool/updat.../g/gnupg/gnupg_1.4.1-1.sarge3.diff.gz
Size/MD5 checksum: 19639 9ffb89fa0a770568ddd80a11e3eada78
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1.orig.tar.gz
Size/MD5 checksum: 4059170 1cc77c6943baaa711222e954bbd785e5

Alpha architecture:

http://security.debian.org/pool/updat.../gnupg/gnupg_1.4.1-1.sarge3_alpha.deb
Size/MD5 checksum: 2155538 07b4643bf4cd05639a261fa0b3fa6a89

AMD64 architecture:

http://security.debian.org/pool/updat.../gnupg/gnupg_1.4.1-1.sarge3_amd64.deb
Size/MD5 checksum: 1963222 52cdf1bb1a228427abd31abff411a946

ARM architecture:

http://security.debian.org/pool/updat.../g/gnupg/gnupg_1.4.1-1.sarge3_arm.deb
Size/MD5 checksum: 1899232 c52b0d652506e2384340d67f8126a1b2

Intel IA-32 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge3_i386.deb
Size/MD5 checksum: 1908754 cd9c2257b8c7149a92131abbdaef498c

Intel IA-64 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge3_ia64.deb
Size/MD5 checksum: 2324736 3553c75fac7cdc0a7d157c20aad4525c

HP Precision architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge3_hppa.deb
Size/MD5 checksum: 2004042 2bb61f214979d403de8e3eab35c4ef00

Motorola 680x0 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge3_m68k.deb
Size/MD5 checksum: 1810978 8da1cbf5b8291ff54194010881832bf1

Big endian MIPS architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge3_mips.deb
Size/MD5 checksum: 2000618 dfcf0ab7c9f5b3aada55bc27c1f1119d

Little endian MIPS architecture:

http://security.debian.org/pool/updat...gnupg/gnupg_1.4.1-1.sarge3_mipsel.deb
Size/MD5 checksum: 2007396 6d99bcd4559ef9a73d43cedd8b8d1680

PowerPC architecture:

http://security.debian.org/pool/updat...nupg/gnupg_1.4.1-1.sarge3_powerpc.deb
Size/MD5 checksum: 1957560 570ae516c68d6803aeafce048e0f978c

IBM S/390 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge3_s390.deb
Size/MD5 checksum: 1966774 2f4a27beba4ff1fc96ef11d9e77b7ec1

Sun Sparc architecture:

http://security.debian.org/pool/updat.../gnupg/gnupg_1.4.1-1.sarge3_sparc.deb
Size/MD5 checksum: 1897162 8520ccf5a05546d18a641a480b5926ac

-- Debian GNU/Linux unstable alias sid --

Fixed in version 1.4.2.2-1.

Original Advisory:
http://lists.debian.org/debian-securi...-security-announce-2006/msg00072.html

Other References:
SA19173:
http://secunia.com/advisories/19173/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Drupal Project Module File Upload and Cross-Site Scripting // 89 views
2. Advanced Poll Multiple Vulnerabilities // 71 views
3. SAP GUI TabOne ActiveX Control Caption List Buffer Overflow // 67 views
4. Symantec Mail Security for SMTP Response Handling Denial of Service // 50 views
5. SmbFTPD Long Command Processing Vulnerability // 46 views
6. Internet Explorer Data Binding Memory Corruption Vulnerability // 41 views
7. Cisco Global Site Selector DNS Request Denial of Service // 37 views
8. Debian update for iceape // 37 views
9. Joomla! "X_CMS_LIBRARY_PATH" Directory Traversal Vulnerability // 34 views
10. Drupal Project Issue Tracking Module Multiple Vulnerabilities // 31 views