Oval Definition:oval:org.opensuse.security:def:81450
Revision Date:2018-06-15Version:1
Title:Security update for gpg2 (Important)
Description:

This update for gpg2 fixes the following security issue:

- CVE-2018-12020: GnuPG mishandled the original filename during decryption and verification actions, which allowed remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the '--status-fd 2' option (bsc#1096745)
Family:unixClass:patch
Status:Reference(s):1096745
CVE-2018-12020
SUSE-SU-2018:1698-1
Platform(s):SUSE Linux Enterprise Server 12 SP2-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • gpg2-2.0.24-9.3.1 is installed
  • OR gpg2-lang-2.0.24-9.3.1 is installed
  • BACK