gpp_maybe Security update for gpg2

SUSE-SLE-SERVER-12-2018-1141

This update for gpg2 fixes the following security issue: - CVE-2018-12020: GnuPG mishandled the original filename during decryption and verification actions, which allowed remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option (bsc#1096745)

• Release Date
  Jun 15 2018
• References
  Bugzilla: 1096745
  CVEs: CVE-2018-12020
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  gpg2
  GnuPG 2

  2.0.24-9.3.1 lock rpm lock src

  gpg2-lang
  Languages for package gpg2

  2.0.24-9.3.1 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  gpg2
  GnuPG 2

  2.0.24-9.3.1 lock rpm lock src

  gpg2-lang
  Languages for package gpg2

  2.0.24-9.3.1 lock rpm