Stay Secure with the Latest Linux Advisories

security advisoryremote attackubuntu

Ubuntu 19.04 Security Notice USN-3964-1: python-gnupg Remote Attack

Several security issues were fixed in python-gnupg. =========================================================================Ubuntu Security Notice USN-3964-1 May 02, 2019 python-gnupg vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.10 - Ubuntu 18.04 LTS Summary: Several security issues were fixed in python-gnupg Software Description: - python-gnupg: Python wrapper for the GNU Privacy Guard Details: Marcus Brinkmann discovered that GnuPG before 2.2.8 improperly handled certain command line parameters. A remote attacker could use this to spoof the output of GnuPG and cause unsigned e-mail to appear signed. (CVE-2018-12020) It was discovered that python-gnupg incorrectly handled the GPG passphrase. A remote attacker could send a specially crafted passphrase that would allow them to control the output of encryption and decryption operations. (CVE-2019-6690) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: python-gnupg 0.4.3-1ubuntu1.19.04.1 python3-gnupg 0.4.3-1ubuntu1.19.04.1 Ubuntu 18.10: python-gnupg 0.4.1-1ubuntu1.18.10.1 python3-gnupg 0.4.1-1ubuntu1.18.10.1 Ubuntu 18.04 LTS: python-gnupg 0.4.1-1ubuntu1.18.04.1 python3-gnupg 0.4.1-1ubuntu1.18.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3964-1 CVE-2018-12020, CVE-2019-6690 Package Information: https://launchpad.net/ubuntu/+source/python-gnupg/0.4.3-1ubuntu1.19.04.1 https://launchpad.net/ubuntu/+source/python-gnupg/0.4.1-1ubuntu1.18.10.1 https://launchpad.net/ubuntu/+source/python-gnupg/0.4.1-1ubuntu1.18.04.1 . Security alert issued for Ubuntu concerningpython-gnupg, aiming to protect users from potential remote threats through command line vulnerabilities and passphrase weaknesses.. Ubuntu Security, python-gnupg Vulnerabilities, Remote Access Exploit. . Severity: Critical. LinuxSecurity.com Team

May 02, 2019 •Critical Ubuntu