[ALSA-2020:4490] Moderate: gnupg2 security, bug fix, and enhancement update
Release date:
The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. The following packages have been upgraded to a later upstream version: gnupg2 (2.2.20). (BZ#1663944) Security Fix(es): * GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS (CVE-2019-13050) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 gnupg2-smime-2.2.20-2.el8.aarch64.rpm 27fa8e88e138750cfa6ff4abaae63272d6208701f94c7978696babcfadc0e49b
aarch64 gnupg2-2.2.20-2.el8.aarch64.rpm 5e6796a609b35520c345d4b2b48e1810f3b7688904d443cbd4ff1c29c7e5292b
ppc64le gnupg2-smime-2.2.20-2.el8.ppc64le.rpm e6fe6621e97b948f7e40e4b4327c4ff4adc65ff8024b5d0113070f71bf28d0f2
ppc64le gnupg2-2.2.20-2.el8.ppc64le.rpm f21ec9f03fc1401b807c1bf794b3dd45bc13d0f6588fa5bd02064070191ddca4
x86_64 gnupg2-2.2.20-2.el8.x86_64.rpm 5c7c2402272e5c49009da9a920bacc5373dea3e487dee4a98f99c9e61910c318
x86_64 gnupg2-smime-2.2.20-2.el8.x86_64.rpm bde5802c4d98146e8fbb1551f2ae91f1d28255a7beadaec15c7420010c2c5733
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.