Stay Secure with the Latest Linux Advisories

security advisorysecurity updateFedora

Fedora 24: Security Update on pgpdump FEDORA-2016-8f4b54b005 Critical Loop

CVE-2016-4021 pgpdump: endless loop parsing specially crafted input. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-8f4b54b005 2016-05-07 11:36:53.843242 -------------------------------------------------------------------------------- Name : pgpdump Product : Fedora 24 Version : 0.30 Release : 1.fc24 URL : http://www.mew.org/~kazu/proj/pgpdump/ Summary : PGP packet visualizer Description : pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP (RFC 4880) and PGP version 2 (RFC 1991). -------------------------------------------------------------------------------- Update Information: CVE-2016-4021 pgpdump: endless loop parsing specially crafted input -------------------------------------------------------------------------------- References: [ 1 ] Bug #1328351 - CVE-2016-4021 pgpdump: endless loop parsing specially crafted input https://bugzilla.redhat.com/show_bug.cgi?id=1328351 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pgpdump' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Debian released a patch for pgpdump tackling CVE-2017-3912, concentrating on vulnerabilities in malformed data handling.. Fedora Patch, pgpdump Security Fix, Update Management. . Severity: Critical. LinuxSecurity.com Team

May 07, 2016 •Critical Fedora