Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=217950
Summary: CVE-2006-6169: gnupg2 < 2.0.1 buffer overflow Product: Fedora Extras Version: fc6 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: normal Component: gnupg2 AssignedTo: rdieter@math.unl.edu ReportedBy: ville.skytta@iki.fi QAContact: extras-qa@fedoraproject.org CC: extras-qa@fedoraproject.org,fedora-security- list@redhat.com
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-6171
"Buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages that cause the make_printable_string function to return a longer string than expected while constructing a prompt."
FE[3456] seem affected, devel looks ok.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2006-6169: gnupg2 < 2.0.1 buffer overflow
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=217950
rdieter@math.unl.edu changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED
------- Additional Comments From rdieter@math.unl.edu 2006-11-30 16:19 EST ------- Yucky. FC-6+ should already be fine. Older releases need patching.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2006-6169: gnupg2 < 2.0.1 buffer overflow
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=217950
------- Additional Comments From ville.skytta@iki.fi 2006-11-30 17:13 EST ------- Unless I'm missing something, the upstream fix is not in FE6's 2.0.1rc1, but only in devel's 2.0.1 final. http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/branches/STABLE-BRANCH-1-4/g10/open...
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2006-6169: gnupg2 < 2.0.1 buffer overflow
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=217950
------- Additional Comments From rdieter@math.unl.edu 2006-12-01 07:40 EST ------- OK, though that's contrary to what the dev's said on the gpg-dev mailing list, I was planning on upgrading FC-6 to 2.0.1 final asap anyway.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2006-6169: gnupg2 < 2.0.1 buffer overflow
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=217950
rdieter@math.unl.edu changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |NEXTRELEASE
------- Additional Comments From rdieter@math.unl.edu 2006-12-01 10:02 EST ------- Okey dokie, builds queue'd for remaining vulnerable releases:
FC-6+: * Wed Nov 29 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-1 - gnupg-2.0.1 - CVE-2006-6169 (bug #217950)
FC-3/4/5: * Fri Dec 01 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-8 - CVE-2006-6169 (bug #217950) - --disable-optmization on 64bit archs
security@lists.fedoraproject.org