Secunia Logo
 
Debian update for gnupg
Secunia Advisory: SA23299
Release Date: 2006-12-11
Popularity: 5,720 views

Critical:
Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 3.1
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-6169
CVE-2006-6235


Description:
Debian has issued an update for gnupg. This fixes some vulnerabilities, which potentially can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA23094
SA23245

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1.sarge6.dsc
Size/MD5 checksum: 680 f99d9936fdb3d87b37f719d4f507702a
http://security.debian.org/pool/updat.../g/gnupg/gnupg_1.4.1-1.sarge6.diff.gz
Size/MD5 checksum: 22889 219b13435d4594c530614638590b65d3
http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1.orig.tar.gz
Size/MD5 checksum: 4059170 1cc77c6943baaa711222e954bbd785e5

Alpha architecture:

http://security.debian.org/pool/updat.../gnupg/gnupg_1.4.1-1.sarge6_alpha.deb
Size/MD5 checksum: 2156230 950520b2391eb6444593c66a8e96d6c3

AMD64 architecture:

http://security.debian.org/pool/updat.../gnupg/gnupg_1.4.1-1.sarge6_amd64.deb
Size/MD5 checksum: 1963738 589ab9ab433e000e919a38f558f54f5e

ARM architecture:

http://security.debian.org/pool/updat.../g/gnupg/gnupg_1.4.1-1.sarge6_arm.deb
Size/MD5 checksum: 1899822 158ed8fe21da9e2b8c730b3b2acce9a8

HP Precision architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge6_hppa.deb
Size/MD5 checksum: 2004374 9daff80c38cf65bb299fb5ee370d44d6

Intel IA-32 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge6_i386.deb
Size/MD5 checksum: 1909194 8752d3578b55a7fd1535bba18ca0770c

Intel IA-64 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge6_ia64.deb
Size/MD5 checksum: 2325806 38fa7bb8def3d1a296aa6aa3432561a3

Motorola 680x0 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge6_m68k.deb
Size/MD5 checksum: 1811222 f51182d8badb7c2b0ef42b78c71be16d

Big endian MIPS architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge6_mips.deb
Size/MD5 checksum: 2001184 cc087abacd572bed64a2ab191d863946

Little endian MIPS architecture:

http://security.debian.org/pool/updat...gnupg/gnupg_1.4.1-1.sarge6_mipsel.deb
Size/MD5 checksum: 2007888 c42342dd898361ed9fcee1bdc8edc3e2

PowerPC architecture:

http://security.debian.org/pool/updat...nupg/gnupg_1.4.1-1.sarge6_powerpc.deb
Size/MD5 checksum: 1958036 ff8ee1d008561ce87732847e895024ec

IBM S/390 architecture:

http://security.debian.org/pool/updat...g/gnupg/gnupg_1.4.1-1.sarge6_s390.deb
Size/MD5 checksum: 1967406 693212d3c1b12bf7f6f204daa0531f6a

Sun Sparc architecture:

http://security.debian.org/pool/updat.../gnupg/gnupg_1.4.1-1.sarge6_sparc.deb
Size/MD5 checksum: 1897740 3821e5e9e69241324d781fe78ed1ace7

-- Debian GNU/Linux unstable alias sid --

Fixed in version 1.4.6-1.

Original Advisory:
http://www.us.debian.org/security/2006/dsa-1231

Other References:
SA23094:
http://secunia.com/advisories/23094/

SA23245:
http://secunia.com/advisories/23245/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Apple iPhone / iPod touch Multiple Vulnerabilities // 33 views
2. IBM Workplace Web Content Management Cross-Site Scripting Vulnerabilities // 30 views
3. BitDefender Antivirus PDF Processing Memory Corruption Vulnerability // 25 views
4. vBulletin Visitor Messages Script Insertion Vulnerability // 24 views
5. Checkpoint VPN-1 Information Disclosure Vulnerability // 23 views
6. Easyedit CMS Multiple SQL Injection Vulnerabilities // 23 views
7. Softbiz Classifieds Script "msg" Cross-Site Scripting Vulnerability // 22 views
8. Sun Java JDK / JRE Multiple Vulnerabilities // 21 views
9. xt:Commerce SQL Injection Vulnerability // 21 views
10. EMC Control Center SAN Manager Multiple Vulnerabilities // 21 views