RHBA-2015:0755 - Bug Fix Advisory

Topic

Updated pinentry packages that fix two bugs are now available for Red Hat
Enterprise Linux 6.

Description

The pinentry packages contain a collection of simple personal identification
number (PIN) or password entry dialogs, which utilize the Assuan protocol as
described by the Project Aegypten. The pinentry packages also contain the
command line version of the PIN entry dialog.

This update fixes the following bugs:

• Due to an auto-detection problem, the pinentry wrapper in some cases attempted

to launch the pinentry-gtk program even if it was not installed. The pinentry
wrapper has been updated, and the problem no longer occurs. (BZ#662770)

• Due to lack of UTF-8 support, the output description text got scrambled when

the "pinentry getpin" command was used. The same problem could occur when using
the GNU Privacy Guard utility that called the "pinentry getpin" command on a key
containing non-ASCII characters in its name. To fix this bug, proper UTF-8
translation has been performed, and the pinentry-curses binary file has been
compiled against the ncursesw library, which contains wide character support. As
a result, the output text is now correct. (BZ#704495)

Users of pinentry are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 662770 - gpg --gen-key fails if pinentry GUI is not installed.
• BZ - 704495 - gpg-agent does not support utf-8

CVEs

(none)

References

(none)