Synopsis

Important: gnupg security update

Type/Severity

Security Advisory: Important

Topic

Updated GnuPG packages that fix two security issues are now available.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

GnuPG is a utility for encrypting data and creating digital signatures.

Tavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts
messages. An attacker could create carefully crafted message that could cause
GnuPG to execute arbitrary code if a victim attempts to decrypt the message.
(CVE-2006-6235)

A heap based buffer overflow flaw was found in the way GnuPG constructs
messages to be written to the terminal during an interactive session. An
attacker could create a carefully crafted message which with user interaction
could cause GnuPG to execute arbitrary code with the permissions of the
user running GnuPG. (CVE-2006-6169)

All users of GnuPG are advised to upgrade to this updated package, which
contains a backported patch to correct these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 218480 - CVE-2006-6235 GnuPG references local variable after function returns
• BZ - 218505 - CVE-2006-6169 GnuPG heap overflow

CVEs

• CVE-2006-6169
• CVE-2006-6235

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 4

SRPM
x86_64
gnupg-1.2.6-8.x86_64.rpm	SHA-256: a098480164d64e1949d177821a54f6fd335a70fa4ee2f6a94217d099f5701a4e
gnupg-1.2.6-8.x86_64.rpm	SHA-256: a098480164d64e1949d177821a54f6fd335a70fa4ee2f6a94217d099f5701a4e
ia64
gnupg-1.2.6-8.ia64.rpm	SHA-256: 59b78d417dab383d92aa8b805f0062a77047f27def71d7ee5e55b5b053c246c4
gnupg-1.2.6-8.ia64.rpm	SHA-256: 59b78d417dab383d92aa8b805f0062a77047f27def71d7ee5e55b5b053c246c4
i386
gnupg-1.2.6-8.i386.rpm	SHA-256: d224481dbc1ca40a2f8f2ab3e4af86d88cc79512d48b60b135909f987b8ce9c4
gnupg-1.2.6-8.i386.rpm	SHA-256: d224481dbc1ca40a2f8f2ab3e4af86d88cc79512d48b60b135909f987b8ce9c4

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
gnupg-1.2.6-8.x86_64.rpm	SHA-256: a098480164d64e1949d177821a54f6fd335a70fa4ee2f6a94217d099f5701a4e
ia64
gnupg-1.2.6-8.ia64.rpm	SHA-256: 59b78d417dab383d92aa8b805f0062a77047f27def71d7ee5e55b5b053c246c4
i386
gnupg-1.2.6-8.i386.rpm	SHA-256: d224481dbc1ca40a2f8f2ab3e4af86d88cc79512d48b60b135909f987b8ce9c4

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
gnupg-1.2.6-8.x86_64.rpm	SHA-256: a098480164d64e1949d177821a54f6fd335a70fa4ee2f6a94217d099f5701a4e
i386
gnupg-1.2.6-8.i386.rpm	SHA-256: d224481dbc1ca40a2f8f2ab3e4af86d88cc79512d48b60b135909f987b8ce9c4

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
gnupg-1.2.6-8.s390x.rpm	SHA-256: 3c7680be215b133137cd38d7c20cb651b737b9528731183ab622f6deec014db7
s390
gnupg-1.2.6-8.s390.rpm	SHA-256: e039bfbf3f43d11d1e51d4fb0ebb09e2d3e8cf0e59b3136a6cb8be1be30f5ed7

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
gnupg-1.2.6-8.ppc.rpm	SHA-256: 6cac71e45387255c3a7451bc6a7fd3626cfc9dc7201a401ca13ff04c7c52f1b0