Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate information

Fedora 28: FEDORA-2018-a89844963c Critical: pass GPG Issue Resolved

Update to new upstream release. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-a89844963c 2018-06-23 20:45:47.529037 --------------------------------------------------------------------------------Name : pass Product : Fedora 28 Version : 1.7.2 Release : 1.fc28 URL : https://www.passwordstore.org/ Summary : A password manager using standard Unix tools Description : Stores, retrieves, generates, and synchronizes passwords securely using gpg and git. --------------------------------------------------------------------------------Update Information: Update to new upstream release --------------------------------------------------------------------------------ChangeLog: * Fri Jun 15 2018 Christophe Fergeau - 1.7.2-1 - Update to new upstream release Resolves: rhbz#1591573 --------------------------------------------------------------------------------References: [ 1 ] Bug #1591573 - CVE-2018-12356 pass: Improper parsing of GPG output allows attackers to spoof file signatures, read passwords and execute code [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1591573 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-a89844963c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code ofConduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/VXZ3257OJCOHBZZYBLZFMRA3E4MRS4CV/ . Upgrade to Fedora 28 for pass: resolves vulnerability associated with GPG output parsing. Use dnf upgrade for installation.. Fedora Security, Pass Manager Updates, Bug Fix Security. . Severity: Critical. LinuxSecurity.com Team

Jun 23, 2018 •Critical Fedora