[SECURITY] Fedora 12 Update: gnupg2-2.0.13-2.fc12

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-11382
2010-07-27 01:35:14
--------------------------------------------------------------------------------

Name        : gnupg2
Product     : Fedora 12
Version     : 2.0.13
Release     : 2.fc12
URL         : http://www.gnupg.org/
Summary     : Utility for secure communication and data storage
Description :
GnuPG is GNU's tool for secure communication and data storage.  It can
be used to encrypt data and to create digital signatures.  It includes
an advanced key management facility and is compliant with the proposed
OpenPGP Internet standard as described in RFC2440 and the S/MIME
standard as described by several RFCs.

GnuPG 2.0 is the stable version of GnuPG integrating support for
OpenPGP and S/MIME.  It does not conflict with an installed 1.x
OpenPGP-only version.

GnuPG 2.0 is a newer version of GnuPG with additional support for
S/MIME.  It has a different design philosophy that splits
functionality up into several modules.  Both versions may be installed
simultaneously without any conflict (gpg is called gpg2 in GnuPG 2).
In fact, the gpg version from GnuPG 1.x is able to make use of the
gpg-agent as included in GnuPG 2 and allows for seamless passphrase
caching.  The advantage of GnupG 1.x is its smaller size and no
dependency on other modules at run and build time.

--------------------------------------------------------------------------------
ChangeLog:

* Fri Jul 23 2010 Rex Dieter <rdieter at fedoraproject.org> - 2.0.13-2
- gpgsm realloc patch
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #618156 - GnuPG 2.0: Use-after-free by importing certificate with many sANs
        https://bugzilla.redhat.com/show_bug.cgi?id=618156
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update gnupg2' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------