GnuPG OpenPGP Packet Processing Function Pointer Overwrite Vulnerability

GnuPG OpenPGP Packet Processing Function Pointer Overwrite Vulnerability

Solution:
To address this issue, the vendor has released version 1.4.6 of GnuPG and 1.0.8 of Gpg4win. Patches for 2.0.1 and 1.4.5 are also available. Version 2.0.2 of GnuPG will also address this issue when it is released.

Please see the referenced advisories for more information.
mailto:vuldb@securityfocus.com

Gpg4win Gpg4win 1.0.1

Gpg4win gpg4win-1.0.8.exe
http://ftp.gpg4win.org/gpg4win-1.0.8.exe

Gpg4win Gpg4win 1.0.2

Gpg4win gpg4win-1.0.8.exe
http://ftp.gpg4win.org/gpg4win-1.0.8.exe

Gpg4win Gpg4win 1.0.5

Gpg4win gpg4win-1.0.8.exe
http://ftp.gpg4win.org/gpg4win-1.0.8.exe

GNU GNU Privacy Guard 1.0.6

Mandriva gnupg-1.4.2.2-0.6.M20mdk.i586.rpm
Multi Network Firewall 2.0:
http://www.mandriva.com/en/download

Gpg4win Gpg4win 1.0.7

Gpg4win gpg4win-1.0.8.exe
http://ftp.gpg4win.org/gpg4win-1.0.8.exe

GNU GNU Privacy Guard 1.2.6

Trustix gnupg-1.2.6-6tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-1.2.6-6tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-1.4.6-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-utils-1.2.6-6tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix gnupg-utils-1.4.6-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

GNU GNU Privacy Guard 1.4

GNU gnupg-1.4.6.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.6.tar.bz2

SuSE gpg-1.4.0-4.11.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/gpg-1.4.0-4.11. x86_64.rpm

GNU GNU Privacy Guard 1.4.1

GNU gnupg-1.4.6.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.6.tar.bz2

IPCop IPCop 1.4.12

IPCop IPCop 1.4.13
http://www.ipcop.org/modules.php?op=modload&name=Downloads&file=index& POSTNUKESID=961e0cc5ccfe96980893c48dc5387e87

GNU GNU Privacy Guard 1.4.4

GNU gnupg-1.4.6.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.6.tar.bz2

GNU GNU Privacy Guard 1.4.5

GNU gnupg-1.4.6.tar.bz2
ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.6.tar.bz2

Mandriva gnupg-1.4.5-1.2mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva gnupg-1.4.5-1.2mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0/X86_64:
http://www.mandriva.com/en/download

Mandriva gnupg2-1.9.22-2.2mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva gnupg2-1.9.22-2.2mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0/X86_64:
http://www.mandriva.com/en/download

RedHat Fedora gnupg-1.4.7-2.ppc.rpm
Fedora Core 6
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

RedHat Fedora gnupg-1.4.7-2.x86_64.rpm
Fedora Core 6
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

RedHat Fedora gnupg-debuginfo-1.4.7-2.i386.rpm
Fedora Core 6
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

RedHat Fedora gnupg-debuginfo-1.4.7-2.ppc.rpm
Fedora Core 6
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

RedHat Fedora gnupg-debuginfo-1.4.7-2.x86_64.rpm
Fedora Core 6
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

SuSE gpg-1.4.5-24.2.x86_64.rpm
openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/gpg-1.4.5-24.2.x86_ 64.rpm

GNU GNU Privacy Guard 1.9.18

SuSE gpg2-1.9.18-17.13.ppc.rpm
SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/gpg2-1.9.18-17.13.ppc. rpm

SuSE gpg2-1.9.18-17.13.x86_64.rpm
SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/gpg2-1.9.18-17.13.x 86_64.rpm

SuSE gpg2-1.9.18-2.11.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/gpg2-1.9.18-2.11. ppc.rpm

SuSE gpg2-1.9.18-2.11.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/gpg2-1.9.18-2. 11.x86_64.rpm

GNU GNU Privacy Guard 1.9.22

SuSE gpg2-1.9.22-20.2.ppc.rpm
openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/gpg2-1.9.22-20.2.ppc.r pm

SuSE gpg2-1.9.22-20.2.x86_64.rpm
openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/gpg2-1.9.22-20.2.x8 6_64.rpm