[Bug 218821] CVE-2006-6235: gnupg2 <= 2.0.1 stack overwrite vulnerability

bugzilla at redhat.com bugzilla at redhat.com
Thu Dec 7 18:25:39 UTC 2006


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2006-6235: gnupg2 <= 2.0.1 stack overwrite vulnerability


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218821


rdieter at math.unl.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|                            |CURRENTRELEASE
   Fixed In Version|                            |2.0.1-2




------- Additional Comments From rdieter at math.unl.edu  2006-12-07 13:25 EST -------
Right FC-6+ build pushed yesterday already.

%changelog
* Wed Dec 06 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-2
- CVE-2006-6235 (bug #218821)

Older releases don't include the gpg2 (and friends) binaries, so they aren't
(shouldn't!) be affected by this.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.




More information about the security mailing list