ELSA-2013-1458

ELSA-2013-1458 - gnupg security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2013-10-24

Description

[1.4.5-18]
- fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted

[1.4.5-17]
- fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
- fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
- fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser

[1.4.5-15]
- fix error when decrypting certain files (#510500)

Related CVEs

CVE-2012-6085

CVE-2013-4402

CVE-2013-4242

CVE-2013-4351

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	gnupg-1.4.5-18.el5_10.src.rpm	d94d361449fa22fbf3b879553ae25bf3b856dd8c255796a6d3a959d90a7bd590	ELSA-2014-0016	ol5_i386_latest
	gnupg-1.4.5-18.el5_10.src.rpm	d94d361449fa22fbf3b879553ae25bf3b856dd8c255796a6d3a959d90a7bd590	ELSA-2014-0016	ol5_u10_i386_patch
	gnupg-1.4.5-18.el5_10.i386.rpm	ee198e75206b8d229307bdfefa552c54ea08792dac69621481d8a9e7cfef725d	ELSA-2014-0016	ol5_i386_latest
	gnupg-1.4.5-18.el5_10.i386.rpm	ee198e75206b8d229307bdfefa552c54ea08792dac69621481d8a9e7cfef725d	ELSA-2014-0016	ol5_u10_i386_patch
Oracle Linux 5 (ia64)	gnupg-1.4.5-18.el5_10.src.rpm	d94d361449fa22fbf3b879553ae25bf3b856dd8c255796a6d3a959d90a7bd590	ELSA-2014-0016	ol5_ia64_latest
	gnupg-1.4.5-18.el5_10.src.rpm	d94d361449fa22fbf3b879553ae25bf3b856dd8c255796a6d3a959d90a7bd590	ELSA-2014-0016	ol5_u10_ia64_patch
	gnupg-1.4.5-18.el5_10.ia64.rpm	0e84017f99e5a5b8ced1bd3faa07833ca05b30f17b48dc6f59f228fdabe5b884	ELSA-2014-0016	ol5_ia64_latest
	gnupg-1.4.5-18.el5_10.ia64.rpm	0e84017f99e5a5b8ced1bd3faa07833ca05b30f17b48dc6f59f228fdabe5b884	ELSA-2014-0016	ol5_u10_ia64_patch
Oracle Linux 5 (x86_64)	gnupg-1.4.5-18.el5_10.src.rpm	d94d361449fa22fbf3b879553ae25bf3b856dd8c255796a6d3a959d90a7bd590	ELSA-2014-0016	ol5_u10_x86_64_patch
	gnupg-1.4.5-18.el5_10.src.rpm	d94d361449fa22fbf3b879553ae25bf3b856dd8c255796a6d3a959d90a7bd590	ELSA-2014-0016	ol5_x86_64_latest
	gnupg-1.4.5-18.el5_10.x86_64.rpm	29057fe1b0009c776563ba8bb633a9814d03fc0806c72842a60765c50db224e1	ELSA-2014-0016	ol5_u10_x86_64_patch
	gnupg-1.4.5-18.el5_10.x86_64.rpm	29057fe1b0009c776563ba8bb633a9814d03fc0806c72842a60765c50db224e1	ELSA-2014-0016	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team