Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Red Hat Enterprise Linux 5: RHSA-2007:0107-02 Critical: GnuPG Spoofing

red hat
Calendar Grey March 14, 2007
Dist Redhat Esm H88
This critical announcement pertains to a libSSH vulnerability in Ubuntu Server, with essential remedies being made available.
Updated GnuPG packages that fix a security issue are now available for Red Hat Enterprise Linux 5

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at


5. Bug IDs fixed (http://bugzilla.redhat.com/):

230467 - CVE-2007-1263 gnupg signed message spoofing

6. RPMs required:

Red Hat Enterprise Linux Desktop (v. 5 client):

SRPMS: 88df873d2b167bdfbb313f3a1ec2ea63 gnupg-1.4.5-13.src.rpm

i386: 47649e57708dfae65f65af9cb619c00d gnupg-1.4.5-13.i386.rpm da2323dcad0b79ef3025ec908456ba49 gnupg-debuginfo-1.4.5-13.i386.rpm

x86_64: d3954a6a0eb0f6a304b2e2ef50401927 gnupg-1.4.5-13.x86_64.rpm b46e792adafc0994c69a34894736f09e gnupg-debuginfo-1.4.5-13.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

SRPMS: 88df873d2b167bdfbb313f3a1ec2ea63 gnupg-1.4.5-13.src.rpm

i386: 47649e57708dfae65f65af9cb619c00d gnupg-1.4.5-13.i386.rpm da2323dcad0b79ef3025ec908456ba49 gnupg-debuginfo-1.4.5-13.i386.rpm

ia64: 264ad7041effae5b298835ce0ea670da gnupg-1.4.5-13.ia64.rpm b96a92a5570c2a2f108980e8f763b555 gnupg-debuginfo-1.4.5-13.ia64.rpm

ppc: 1a52050adf71e8b6aed8133e500569f4 gnupg-1.4.5-13.ppc.rpm 2b3765fc4aad400474eec29987157722 gnupg-debuginfo-1.4.5-13.ppc.rpm

s390x: 589c91def49fc94470e62b705bc30d28 gnupg-1.4.5-13.s390x.rpm daffde420c50a8e5a7b8e2a97d54fbe7 gnupg-debuginfo-1.4.5-13.s390x.rpm

x86_64: d3954a6a0eb0f6a304b2e2ef50401927 gnupg-1.4.5-13.x86_64.rpm b46e792adafc0994c69a34894736f09e gnupg-debuginfo-1.4.5-13.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics%20covered

Topics Covered

security advisory important gnuPG spoofing signed message

References

https://www.cve.org/CVERecord?id=CVE-2007-1263 https://access.redhat.com/security/updates/classification#important

Package List


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2007:0107-02
Advisory URL: https://access.redhat.com/errata/RHSA-2007:0107.html
Issue date: 2007-03-13
Updated on: 2007-03-14
Product: Red Hat Enterprise Linux

Topic

Topics%20covered

Topics Covered

security advisory important gnuPG spoofing signed message

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here