Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Slackware 14.1: SSA:2014-175-03 Critical DoS Fix for GnuPG2

slackware
Calendar Grey June 24, 2014
Dist Slackware Esm H88
Recent updates for gnupg2 in Slackware tackle a significant Denial of Service vulnerability affecting several iterations. Users are strongly encouraged to upgrade.
New gnupg2 packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/gnupg2-2.0.24-i486-1_slack14.1.txz: Upgraded. This release includes a security fix to stop a denial of service using garbled compressed data packets which can be used to put gpg into an infinite loop. For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-4617 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 13.37 package: cc0c37aacd0d3eab10f353d3f82f3584 gnupg2-2.0.24-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: 8c76fafd4e469785dd571ad84a679a18 gnupg2-2.0.24-x86_64-1_slack13.37.txz
Slackware 14.0 package: 47bc00e244c2c52d8177fbae205b6609 gnupg2-2.0.24-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: d76d81aa67d0806ad3a85b4e1772bd31 gnupg2-2.0.24-x86_64-1_slack14.0.txz
Slackware 14.1 package: 3649d32b6fb1733320acbc47ca10ff02 gnupg2-2.0.24-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 9f77fb4f094295c4c396d02fba3b8159 gnupg2-2.0.24-x86_64-1_slack14.1.txz
Slackware -current package: a14b1af17da04ccc4651215c84682d5d n/gnupg2-2.0.24-i486-1.txz
Slackware x86_64 -current package: 02705c86d2231234533427c1cd5b1da3 n/gnupg2-2.0.24-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg gnupg2-2.0.24-i486-1_slack14.1.txz

Related News

Your message here