Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Slackware: 2006-178-02 Critical: GnuPG DoS Memory Overflow Issue

slackware
Calendar Grey June 28, 2006
Dist Slackware Esm H88
Fresh GnuPG updates for Slackware address a memory vulnerability that could lead to Denial of Service, boosting overall security and reliability.
New GnuPG packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues which could allow an attacker to crash gnupg and possibly overwrite m...

Summary

Here are the details from the Slackware 10.2 ChangeLog: patches/packages/gnupg-1.4.4-i486-1_slack10.2.tgz: This version fixes a memory allocation issue that could allow an attacker to crash GnuPG creating a denial-of-service. The CVE entry for this issue may be found here: https://www.cve.org/CVERecord?id=CVE-2006-3082

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 9.0:
Updated package for Slackware 9.1:
Updated package for Slackware 10.0:
Updated package for Slackware 10.1:
Updated package for Slackware 10.2:
Updated package for Slackware -current:

MD5 Signatures

Slackware 9.0 package: 6d43feab64fb2a3f35090bf92f98c667 gnupg-1.4.4-i386-1_slack9.0.tgz
Slackware 9.1 package: faee8c056fc1817d84c168fa106a6a14 gnupg-1.4.4-i486-1_slack9.1.tgz
Slackware 10.0 package: 20beefaf272e9e781c66d78a97ad8490 gnupg-1.4.4-i486-1_slack10.0.tgz
Slackware 10.1 package: f8cc9a380c35e26619df7652f6357aee gnupg-1.4.4-i486-1_slack10.1.tgz
Slackware 10.2 package: 917eead27d9412bb032c3b2cbc7513b5 gnupg-1.4.4-i486-1_slack10.2.tgz
Slackware -current package: 40da0c3d313100c8c1e90e0c4b47a4d1 gnupg-1.4.4-i486-1.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the packages as root: # upgradepkg gnupg-1.4.4-i486-1_slack10.2.tgz

Related News

Your message here