MGASA-2018-0292

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2018-0292.html
Import Source
https://advisories.mageia.org/MGASA-2018-0292.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2018-0292
Related
Published
2018-06-19T23:42:28Z
Modified
2018-06-19T23:06:46Z
Summary
Updated gnupg gnupg2 packages fix a security vulnerability
Details

Updated gnupg, gnupg2, and python-gnupg packages fix security vulnerability:

Marcus Brinkmann discovered that during decryption or verification, GnuPG did not properly filter out terminal sequences when reporting the original filename. An attacker could use this to specially craft a file that would cause an application parsing GnuPG output to incorrectly interpret the status of the cryptographic operation reported by GnuPG (CVE-2018-12020).

References
Credits

Affected packages

Mageia:6 / gnupg

Package

Name
gnupg
Purl
pkg:rpm/mageia/gnupg?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.23-1.mga6

Ecosystem specific 

{
    "section": "core"
}

Mageia:6 / gnupg2

Package

Name
gnupg2
Purl
pkg:rpm/mageia/gnupg2?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.21-3.1.mga6

Ecosystem specific 

{
    "section": "core"
}

Mageia:6 / python-gnupg

Package

Name
python-gnupg
Purl
pkg:rpm/mageia/python-gnupg?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3.8-2.1.mga6

Ecosystem specific 

{
    "section": "core"
}

Mageia:5 / gnupg

Package

Name
gnupg
Purl
pkg:rpm/mageia/gnupg?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.19-1.4.mga5

Ecosystem specific 

{
    "section": "core"
}

Mageia:5 / gnupg2

Package

Name
gnupg2
Purl
pkg:rpm/mageia/gnupg2?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.27-1.2.mga5

Ecosystem specific 

{
    "section": "core"
}

Mageia:5 / python-gnupg

Package

Name
python-gnupg
Purl
pkg:rpm/mageia/python-gnupg?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3.6-4.1.mga5

Ecosystem specific 

{
    "section": "core"
}