Stay Secure with the Latest Linux Advisories

security advisoryupdategnupg

Ubuntu 12.04 ESM USN-3675-3 Critical: GnuPG Cryptographic Flaw

GnuPG could be made to incorrectly interpret the status of the cryptographic operation if it received specially crafted file.. =========================================================================Ubuntu Security Notice USN-3675-3 June 18, 2018 gnupg vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: GnuPG could be made to incorrectly interpret the status of the cryptographic operation if it received specially crafted file. Software Description: - gnupg: GNU privacy guard - a free PGP replacement Details: USN-3675-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Marcus Brinkmann discovered that during decryption or verification, GnuPG did not properly filter out terminal sequences when reporting the original filename. An attacker could use this to specially craft a file that would cause an application parsing GnuPG output to incorrectly interpret the status of the cryptographic operation reported by GnuPG. (CVE-2018-12020) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: gnupg 1.4.11-3ubuntu2.11 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3675-3 https://ubuntu.com/security/notices/USN-3675-1 CVE-2018-12020 . Ubuntu Security Notice USN-3675-3 June 18, 2018 gnupg vulnerability A security issue affects these r. gnupg, incorrectly, interpret, status, cryptographic, operation, receive. . Severity: Critical. LinuxSecurity.com Team

Jun 18, 2018 •Critical Ubuntu