Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2006-6169 (GCVE-0-2006-6169)
Vulnerability from cvelistv5
Published
2006-11-29 18:00
Modified
2024-08-07 20:19
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T20:19:34.866Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "23110",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23110"
},
{
"name": "23269",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23269"
},
{
"name": "23303",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23303"
},
{
"name": "20061127 GnuPG 1.4 and 2.0 buffer overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"name": "gnupg-openfile-bo(30550)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"name": "23513",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23513"
},
{
"name": "23284",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23284"
},
{
"name": "23146",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23146"
},
{
"name": "23171",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23171"
},
{
"name": "USN-393-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"name": "RHSA-2006:0754",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"name": "2006-0068",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX",
"x_transferred"
],
"url": "http://www.trustix.org/errata/2006/0068/"
},
{
"name": "1927",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/1927"
},
{
"name": "DSA-1231",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"name": "23299",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23299"
},
{
"name": "USN-389-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"name": "1017291",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1017291"
},
{
"name": "GLSA-200612-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"name": "[gnupg-announce] 20061127 GnuPG 1.4 and 2.0 buffer overflow",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"name": "23094",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23094"
},
{
"name": "SUSE-SA:2006:075",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"name": "20061201 rPSA-2006-0224-1 gnupg",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"name": "21306",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21306"
},
{
"name": "ADV-2006-4736",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/4736"
},
{
"name": "23250",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23250"
},
{
"name": "20061201-01-P",
"tags": [
"vendor-advisory",
"x_refsource_SGI",
"x_transferred"
],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc"
},
{
"name": "23161",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23161"
},
{
"name": "MDKSA-2006:221",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"name": "OpenPKG-SA-2006.037",
"tags": [
"vendor-advisory",
"x_refsource_OPENPKG",
"x_transferred"
],
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"name": "oval:org.mitre.oval:def:11228",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
},
{
"name": "24047",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24047"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-11-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-17T20:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "23110",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23110"
},
{
"name": "23269",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23269"
},
{
"name": "23303",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23303"
},
{
"name": "20061127 GnuPG 1.4 and 2.0 buffer overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"name": "gnupg-openfile-bo(30550)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"name": "23513",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23513"
},
{
"name": "23284",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23284"
},
{
"name": "23146",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23146"
},
{
"name": "23171",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23171"
},
{
"name": "USN-393-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"name": "RHSA-2006:0754",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"name": "2006-0068",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX"
],
"url": "http://www.trustix.org/errata/2006/0068/"
},
{
"name": "1927",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/1927"
},
{
"name": "DSA-1231",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"name": "23299",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23299"
},
{
"name": "USN-389-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"name": "1017291",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1017291"
},
{
"name": "GLSA-200612-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"name": "[gnupg-announce] 20061127 GnuPG 1.4 and 2.0 buffer overflow",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"name": "23094",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23094"
},
{
"name": "SUSE-SA:2006:075",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"name": "20061201 rPSA-2006-0224-1 gnupg",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"name": "21306",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21306"
},
{
"name": "ADV-2006-4736",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/4736"
},
{
"name": "23250",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23250"
},
{
"name": "20061201-01-P",
"tags": [
"vendor-advisory",
"x_refsource_SGI"
],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc"
},
{
"name": "23161",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23161"
},
{
"name": "MDKSA-2006:221",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"name": "OpenPKG-SA-2006.037",
"tags": [
"vendor-advisory",
"x_refsource_OPENPKG"
],
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"name": "oval:org.mitre.oval:def:11228",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
},
{
"name": "24047",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24047"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6169",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23110",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23110"
},
{
"name": "23269",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23269"
},
{
"name": "23303",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23303"
},
{
"name": "20061127 GnuPG 1.4 and 2.0 buffer overflow",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
},
{
"name": "https://issues.rpath.com/browse/RPL-826",
"refsource": "CONFIRM",
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"name": "gnupg-openfile-bo(30550)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"name": "23513",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23513"
},
{
"name": "23284",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23284"
},
{
"name": "23146",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23146"
},
{
"name": "23171",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23171"
},
{
"name": "USN-393-2",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"name": "RHSA-2006:0754",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"name": "2006-0068",
"refsource": "TRUSTIX",
"url": "http://www.trustix.org/errata/2006/0068/"
},
{
"name": "1927",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1927"
},
{
"name": "DSA-1231",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"name": "23299",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23299"
},
{
"name": "USN-389-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"name": "https://bugs.g10code.com/gnupg/issue728",
"refsource": "MISC",
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"name": "1017291",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017291"
},
{
"name": "GLSA-200612-03",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"name": "[gnupg-announce] 20061127 GnuPG 1.4 and 2.0 buffer overflow",
"refsource": "MLIST",
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"name": "23094",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23094"
},
{
"name": "SUSE-SA:2006:075",
"refsource": "SUSE",
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"name": "20061201 rPSA-2006-0224-1 gnupg",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"name": "21306",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21306"
},
{
"name": "ADV-2006-4736",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4736"
},
{
"name": "23250",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23250"
},
{
"name": "20061201-01-P",
"refsource": "SGI",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc"
},
{
"name": "23161",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23161"
},
{
"name": "MDKSA-2006:221",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"name": "OpenPKG-SA-2006.037",
"refsource": "OPENPKG",
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"name": "oval:org.mitre.oval:def:11228",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
},
{
"name": "24047",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24047"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-6169",
"datePublished": "2006-11-29T18:00:00",
"dateReserved": "2006-11-29T00:00:00",
"dateUpdated": "2024-08-07T20:19:34.866Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2006-6169\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2006-11-29T18:28:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \\\"C-escape\\\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer basado en mont\u00edculo en la funci\u00f3n ask_outfile_name en el openfile.c para GnuPG (gpg) 1.4 y 2.0, cuando se est\u00e1 ejecutando interactivamente, podr\u00eda permitir a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante mensajes con expansiones \\\"C-escape\\\", que provocan que la funci\u00f3n make_printable_string devuelva una cadena m\u00e1s larga de lo esperado mientras construye un aviso.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":true,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnupg:gnupg:1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"365FF476-1FFD-4E09-900C-50E0660766AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnupg:gnupg:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47C64072-FC9C-4CA9-9752-3BC08839E319\"}]}]}],\"references\":[{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23094\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23110\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23146\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23161\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23171\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23250\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23269\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23284\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23299\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23303\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/23513\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/24047\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200612-03.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securityreason.com/securityalert/1927\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securitytracker.com/id?1017291\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2006/dsa-1231\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2006:221\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0754.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/452829/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/453253/100/100/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/21306\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.trustix.org/errata/2006/0068/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/usn-389-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/usn-393-2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/4736\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugs.g10code.com/gnupg/issue728\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/30550\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://issues.rpath.com/browse/RPL-826\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228\",\"source\":\"cve@mitre.org\"},{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23094\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23110\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23146\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23161\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23171\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23250\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23269\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23284\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23299\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23303\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23513\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/24047\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200612-03.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securityreason.com/securityalert/1927\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1017291\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2006/dsa-1231\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2006:221\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0754.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/452829/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/453253/100/100/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/21306\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.trustix.org/errata/2006/0068/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/usn-389-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/usn-393-2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/4736\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugs.g10code.com/gnupg/issue728\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/30550\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://issues.rpath.com/browse/RPL-826\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"vendorComments\":[{\"organization\":\"Red Hat\",\"comment\":\"Red Hat does not consider this bug to be a security flaw. In order for this flaw to be exploited, a user would be required to enter shellcode into an interactive GnuPG session. Red Hat considers this to be an unlikely scenario.\\n\\nRed Hat Enterprise Linux 5 contains a backported patch to address this issue.\",\"lastModified\":\"2007-03-14T00:00:00\"}]}}"
}
}
RHSA-2006:0754
Vulnerability from csaf_redhat
Published
2006-12-06 17:53
Modified
2025-10-09 12:57
Summary
Red Hat Security Advisory: gnupg security update
Notes
Topic
Updated GnuPG packages that fix two security issues are now available.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
GnuPG is a utility for encrypting data and creating digital signatures.
Tavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts
messages. An attacker could create carefully crafted message that could cause
GnuPG to execute arbitrary code if a victim attempts to decrypt the message.
(CVE-2006-6235)
A heap based buffer overflow flaw was found in the way GnuPG constructs
messages to be written to the terminal during an interactive session. An
attacker could create a carefully crafted message which with user interaction
could cause GnuPG to execute arbitrary code with the permissions of the
user running GnuPG. (CVE-2006-6169)
All users of GnuPG are advised to upgrade to this updated package, which
contains a backported patch to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated GnuPG packages that fix two security issues are now available.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "GnuPG is a utility for encrypting data and creating digital signatures.\n\nTavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts\nmessages. An attacker could create carefully crafted message that could cause\nGnuPG to execute arbitrary code if a victim attempts to decrypt the message.\n(CVE-2006-6235)\n\nA heap based buffer overflow flaw was found in the way GnuPG constructs\nmessages to be written to the terminal during an interactive session. An\nattacker could create a carefully crafted message which with user interaction\ncould cause GnuPG to execute arbitrary code with the permissions of the\nuser running GnuPG. (CVE-2006-6169)\n\nAll users of GnuPG are advised to upgrade to this updated package, which\ncontains a backported patch to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2006:0754",
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#important",
"url": "http://www.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "218480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=218480"
},
{
"category": "external",
"summary": "218505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=218505"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0754.json"
}
],
"title": "Red Hat Security Advisory: gnupg security update",
"tracking": {
"current_release_date": "2025-10-09T12:57:26+00:00",
"generator": {
"date": "2025-10-09T12:57:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2006:0754",
"initial_release_date": "2006-12-06T17:53:00+00:00",
"revision_history": [
{
"date": "2006-12-06T17:53:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2006-12-12T15:50:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T12:57:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux Advanced Workstation 2.1",
"product": {
"name": "Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.ia64",
"product": {
"name": "gnupg-0:1.0.7-20.ia64",
"product_id": "gnupg-0:1.0.7-20.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product_id": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.ia64",
"product": {
"name": "gnupg-0:1.2.6-8.ia64",
"product_id": "gnupg-0:1.2.6-8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.ia64",
"product": {
"name": "gnupg-0:1.2.1-19.ia64",
"product_id": "gnupg-0:1.2.1-19.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product_id": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.src",
"product": {
"name": "gnupg-0:1.0.7-20.src",
"product_id": "gnupg-0:1.0.7-20.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=src"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.src",
"product": {
"name": "gnupg-0:1.2.6-8.src",
"product_id": "gnupg-0:1.2.6-8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=src"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.src",
"product": {
"name": "gnupg-0:1.2.1-19.src",
"product_id": "gnupg-0:1.2.1-19.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.i386",
"product": {
"name": "gnupg-0:1.0.7-20.i386",
"product_id": "gnupg-0:1.0.7-20.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.i386",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386",
"product_id": "gnupg-debuginfo-0:1.2.6-8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.i386",
"product": {
"name": "gnupg-0:1.2.6-8.i386",
"product_id": "gnupg-0:1.2.6-8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.i386",
"product": {
"name": "gnupg-0:1.2.1-19.i386",
"product_id": "gnupg-0:1.2.1-19.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.i386",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386",
"product_id": "gnupg-debuginfo-0:1.2.1-19.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product_id": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.x86_64",
"product": {
"name": "gnupg-0:1.2.6-8.x86_64",
"product_id": "gnupg-0:1.2.6-8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.x86_64",
"product": {
"name": "gnupg-0:1.2.1-19.x86_64",
"product_id": "gnupg-0:1.2.1-19.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product_id": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product_id": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.ppc",
"product": {
"name": "gnupg-0:1.2.6-8.ppc",
"product_id": "gnupg-0:1.2.6-8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.ppc",
"product": {
"name": "gnupg-0:1.2.1-19.ppc",
"product_id": "gnupg-0:1.2.1-19.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product_id": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product_id": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.s390x",
"product": {
"name": "gnupg-0:1.2.6-8.s390x",
"product_id": "gnupg-0:1.2.6-8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.s390x",
"product": {
"name": "gnupg-0:1.2.1-19.s390x",
"product_id": "gnupg-0:1.2.1-19.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product_id": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.s390",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390",
"product_id": "gnupg-debuginfo-0:1.2.6-8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.s390",
"product": {
"name": "gnupg-0:1.2.6-8.s390",
"product_id": "gnupg-0:1.2.6-8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.s390",
"product": {
"name": "gnupg-0:1.2.1-19.s390",
"product_id": "gnupg-0:1.2.1-19.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.s390",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390",
"product_id": "gnupg-debuginfo-0:1.2.1-19.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-6169",
"discovery_date": "2006-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "217950"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": ": gnupg2 \u003c 2.0.1 buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat does not consider this bug to be a security flaw. In order for this flaw to be exploited, a user would be required to enter shellcode into an interactive GnuPG session. Red Hat considers this to be an unlikely scenario.\n\nRed Hat Enterprise Linux 5 contains a backported patch to address this issue.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6169"
},
{
"category": "external",
"summary": "RHBZ#217950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=217950"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6169",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6169"
}
],
"release_date": "2006-11-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-12-06T17:53:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": ": gnupg2 \u003c 2.0.1 buffer overflow"
},
{
"cve": "CVE-2006-6235",
"discovery_date": "2006-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618242"
}
],
"notes": [
{
"category": "description",
"text": "A \"stack overwrite\" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6235"
},
{
"category": "external",
"summary": "RHBZ#1618242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6235",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6235"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6235",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6235"
}
],
"release_date": "2006-12-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-12-06T17:53:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
rhsa-2006_0754
Vulnerability from csaf_redhat
Published
2006-12-06 17:53
Modified
2024-11-22 00:41
Summary
Red Hat Security Advisory: gnupg security update
Notes
Topic
Updated GnuPG packages that fix two security issues are now available.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
GnuPG is a utility for encrypting data and creating digital signatures.
Tavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts
messages. An attacker could create carefully crafted message that could cause
GnuPG to execute arbitrary code if a victim attempts to decrypt the message.
(CVE-2006-6235)
A heap based buffer overflow flaw was found in the way GnuPG constructs
messages to be written to the terminal during an interactive session. An
attacker could create a carefully crafted message which with user interaction
could cause GnuPG to execute arbitrary code with the permissions of the
user running GnuPG. (CVE-2006-6169)
All users of GnuPG are advised to upgrade to this updated package, which
contains a backported patch to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated GnuPG packages that fix two security issues are now available.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "GnuPG is a utility for encrypting data and creating digital signatures.\n\nTavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts\nmessages. An attacker could create carefully crafted message that could cause\nGnuPG to execute arbitrary code if a victim attempts to decrypt the message.\n(CVE-2006-6235)\n\nA heap based buffer overflow flaw was found in the way GnuPG constructs\nmessages to be written to the terminal during an interactive session. An\nattacker could create a carefully crafted message which with user interaction\ncould cause GnuPG to execute arbitrary code with the permissions of the\nuser running GnuPG. (CVE-2006-6169)\n\nAll users of GnuPG are advised to upgrade to this updated package, which\ncontains a backported patch to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2006:0754",
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#important",
"url": "http://www.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "218480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=218480"
},
{
"category": "external",
"summary": "218505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=218505"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0754.json"
}
],
"title": "Red Hat Security Advisory: gnupg security update",
"tracking": {
"current_release_date": "2024-11-22T00:41:50+00:00",
"generator": {
"date": "2024-11-22T00:41:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2006:0754",
"initial_release_date": "2006-12-06T17:53:00+00:00",
"revision_history": [
{
"date": "2006-12-06T17:53:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2006-12-12T15:50:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T00:41:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux Advanced Workstation 2.1",
"product": {
"name": "Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.ia64",
"product": {
"name": "gnupg-0:1.0.7-20.ia64",
"product_id": "gnupg-0:1.0.7-20.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product_id": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.ia64",
"product": {
"name": "gnupg-0:1.2.6-8.ia64",
"product_id": "gnupg-0:1.2.6-8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.ia64",
"product": {
"name": "gnupg-0:1.2.1-19.ia64",
"product_id": "gnupg-0:1.2.1-19.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product_id": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.src",
"product": {
"name": "gnupg-0:1.0.7-20.src",
"product_id": "gnupg-0:1.0.7-20.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=src"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.src",
"product": {
"name": "gnupg-0:1.2.6-8.src",
"product_id": "gnupg-0:1.2.6-8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=src"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.src",
"product": {
"name": "gnupg-0:1.2.1-19.src",
"product_id": "gnupg-0:1.2.1-19.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.i386",
"product": {
"name": "gnupg-0:1.0.7-20.i386",
"product_id": "gnupg-0:1.0.7-20.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.i386",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386",
"product_id": "gnupg-debuginfo-0:1.2.6-8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.i386",
"product": {
"name": "gnupg-0:1.2.6-8.i386",
"product_id": "gnupg-0:1.2.6-8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.i386",
"product": {
"name": "gnupg-0:1.2.1-19.i386",
"product_id": "gnupg-0:1.2.1-19.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.i386",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386",
"product_id": "gnupg-debuginfo-0:1.2.1-19.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product_id": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.x86_64",
"product": {
"name": "gnupg-0:1.2.6-8.x86_64",
"product_id": "gnupg-0:1.2.6-8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.x86_64",
"product": {
"name": "gnupg-0:1.2.1-19.x86_64",
"product_id": "gnupg-0:1.2.1-19.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product_id": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product_id": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.ppc",
"product": {
"name": "gnupg-0:1.2.6-8.ppc",
"product_id": "gnupg-0:1.2.6-8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.ppc",
"product": {
"name": "gnupg-0:1.2.1-19.ppc",
"product_id": "gnupg-0:1.2.1-19.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product_id": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product_id": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.s390x",
"product": {
"name": "gnupg-0:1.2.6-8.s390x",
"product_id": "gnupg-0:1.2.6-8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.s390x",
"product": {
"name": "gnupg-0:1.2.1-19.s390x",
"product_id": "gnupg-0:1.2.1-19.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product_id": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.s390",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390",
"product_id": "gnupg-debuginfo-0:1.2.6-8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.s390",
"product": {
"name": "gnupg-0:1.2.6-8.s390",
"product_id": "gnupg-0:1.2.6-8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.s390",
"product": {
"name": "gnupg-0:1.2.1-19.s390",
"product_id": "gnupg-0:1.2.1-19.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.s390",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390",
"product_id": "gnupg-debuginfo-0:1.2.1-19.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-6169",
"discovery_date": "2006-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "217950"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": ": gnupg2 \u003c 2.0.1 buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat does not consider this bug to be a security flaw. In order for this flaw to be exploited, a user would be required to enter shellcode into an interactive GnuPG session. Red Hat considers this to be an unlikely scenario.\n\nRed Hat Enterprise Linux 5 contains a backported patch to address this issue.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6169"
},
{
"category": "external",
"summary": "RHBZ#217950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=217950"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6169",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6169"
}
],
"release_date": "2006-11-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-12-06T17:53:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": ": gnupg2 \u003c 2.0.1 buffer overflow"
},
{
"cve": "CVE-2006-6235",
"discovery_date": "2006-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618242"
}
],
"notes": [
{
"category": "description",
"text": "A \"stack overwrite\" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6235"
},
{
"category": "external",
"summary": "RHBZ#1618242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6235",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6235"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6235",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6235"
}
],
"release_date": "2006-12-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-12-06T17:53:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
rhsa-2006:0754
Vulnerability from csaf_redhat
Published
2006-12-06 17:53
Modified
2025-10-09 12:57
Summary
Red Hat Security Advisory: gnupg security update
Notes
Topic
Updated GnuPG packages that fix two security issues are now available.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
GnuPG is a utility for encrypting data and creating digital signatures.
Tavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts
messages. An attacker could create carefully crafted message that could cause
GnuPG to execute arbitrary code if a victim attempts to decrypt the message.
(CVE-2006-6235)
A heap based buffer overflow flaw was found in the way GnuPG constructs
messages to be written to the terminal during an interactive session. An
attacker could create a carefully crafted message which with user interaction
could cause GnuPG to execute arbitrary code with the permissions of the
user running GnuPG. (CVE-2006-6169)
All users of GnuPG are advised to upgrade to this updated package, which
contains a backported patch to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated GnuPG packages that fix two security issues are now available.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "GnuPG is a utility for encrypting data and creating digital signatures.\n\nTavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts\nmessages. An attacker could create carefully crafted message that could cause\nGnuPG to execute arbitrary code if a victim attempts to decrypt the message.\n(CVE-2006-6235)\n\nA heap based buffer overflow flaw was found in the way GnuPG constructs\nmessages to be written to the terminal during an interactive session. An\nattacker could create a carefully crafted message which with user interaction\ncould cause GnuPG to execute arbitrary code with the permissions of the\nuser running GnuPG. (CVE-2006-6169)\n\nAll users of GnuPG are advised to upgrade to this updated package, which\ncontains a backported patch to correct these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2006:0754",
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
},
{
"category": "external",
"summary": "http://www.redhat.com/security/updates/classification/#important",
"url": "http://www.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "218480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=218480"
},
{
"category": "external",
"summary": "218505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=218505"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0754.json"
}
],
"title": "Red Hat Security Advisory: gnupg security update",
"tracking": {
"current_release_date": "2025-10-09T12:57:26+00:00",
"generator": {
"date": "2025-10-09T12:57:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2006:0754",
"initial_release_date": "2006-12-06T17:53:00+00:00",
"revision_history": [
{
"date": "2006-12-06T17:53:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2006-12-12T15:50:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T12:57:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux Advanced Workstation 2.1",
"product": {
"name": "Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.ia64",
"product": {
"name": "gnupg-0:1.0.7-20.ia64",
"product_id": "gnupg-0:1.0.7-20.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product_id": "gnupg-debuginfo-0:1.2.6-8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.ia64",
"product": {
"name": "gnupg-0:1.2.6-8.ia64",
"product_id": "gnupg-0:1.2.6-8.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.ia64",
"product": {
"name": "gnupg-0:1.2.1-19.ia64",
"product_id": "gnupg-0:1.2.1-19.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product_id": "gnupg-debuginfo-0:1.2.1-19.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.src",
"product": {
"name": "gnupg-0:1.0.7-20.src",
"product_id": "gnupg-0:1.0.7-20.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=src"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.src",
"product": {
"name": "gnupg-0:1.2.6-8.src",
"product_id": "gnupg-0:1.2.6-8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=src"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.src",
"product": {
"name": "gnupg-0:1.2.1-19.src",
"product_id": "gnupg-0:1.2.1-19.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-0:1.0.7-20.i386",
"product": {
"name": "gnupg-0:1.0.7-20.i386",
"product_id": "gnupg-0:1.0.7-20.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.0.7-20?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.i386",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386",
"product_id": "gnupg-debuginfo-0:1.2.6-8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.i386",
"product": {
"name": "gnupg-0:1.2.6-8.i386",
"product_id": "gnupg-0:1.2.6-8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.i386",
"product": {
"name": "gnupg-0:1.2.1-19.i386",
"product_id": "gnupg-0:1.2.1-19.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=i386"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.i386",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386",
"product_id": "gnupg-debuginfo-0:1.2.1-19.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product_id": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.x86_64",
"product": {
"name": "gnupg-0:1.2.6-8.x86_64",
"product_id": "gnupg-0:1.2.6-8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.x86_64",
"product": {
"name": "gnupg-0:1.2.1-19.x86_64",
"product_id": "gnupg-0:1.2.1-19.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product_id": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product_id": "gnupg-debuginfo-0:1.2.6-8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.ppc",
"product": {
"name": "gnupg-0:1.2.6-8.ppc",
"product_id": "gnupg-0:1.2.6-8.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.ppc",
"product": {
"name": "gnupg-0:1.2.1-19.ppc",
"product_id": "gnupg-0:1.2.1-19.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product_id": "gnupg-debuginfo-0:1.2.1-19.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product_id": "gnupg-debuginfo-0:1.2.6-8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.s390x",
"product": {
"name": "gnupg-0:1.2.6-8.s390x",
"product_id": "gnupg-0:1.2.6-8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.s390x",
"product": {
"name": "gnupg-0:1.2.1-19.s390x",
"product_id": "gnupg-0:1.2.1-19.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product_id": "gnupg-debuginfo-0:1.2.1-19.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.6-8.s390",
"product": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390",
"product_id": "gnupg-debuginfo-0:1.2.6-8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.6-8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.6-8.s390",
"product": {
"name": "gnupg-0:1.2.6-8.s390",
"product_id": "gnupg-0:1.2.6-8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.6-8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-0:1.2.1-19.s390",
"product": {
"name": "gnupg-0:1.2.1-19.s390",
"product_id": "gnupg-0:1.2.1-19.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg@1.2.1-19?arch=s390"
}
}
},
{
"category": "product_version",
"name": "gnupg-debuginfo-0:1.2.1-19.s390",
"product": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390",
"product_id": "gnupg-debuginfo-0:1.2.1-19.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnupg-debuginfo@1.2.1-19?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.i386"
},
"product_reference": "gnupg-0:1.0.7-20.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.ia64"
},
"product_reference": "gnupg-0:1.0.7-20.ia64",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.0.7-20.src as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:gnupg-0:1.0.7-20.src"
},
"product_reference": "gnupg-0:1.0.7-20.src",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.i386"
},
"product_reference": "gnupg-0:1.2.1-19.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-0:1.2.1-19.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-0:1.2.1-19.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.s390"
},
"product_reference": "gnupg-0:1.2.1-19.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-0:1.2.1-19.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.src"
},
"product_reference": "gnupg-0:1.2.1-19.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.ppc as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.ppc",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.s390x as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.s390x",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.1-19.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:gnupg-debuginfo-0:1.2.1-19.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.1-19.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.i386"
},
"product_reference": "gnupg-0:1.2.6-8.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-0:1.2.6-8.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-0:1.2.6-8.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.s390"
},
"product_reference": "gnupg-0:1.2.6-8.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-0:1.2.6-8.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.src"
},
"product_reference": "gnupg-0:1.2.6-8.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.i386"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.ia64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.ppc"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.s390"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.s390x"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnupg-debuginfo-0:1.2.6-8.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
},
"product_reference": "gnupg-debuginfo-0:1.2.6-8.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-6169",
"discovery_date": "2006-11-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "217950"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": ": gnupg2 \u003c 2.0.1 buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat does not consider this bug to be a security flaw. In order for this flaw to be exploited, a user would be required to enter shellcode into an interactive GnuPG session. Red Hat considers this to be an unlikely scenario.\n\nRed Hat Enterprise Linux 5 contains a backported patch to address this issue.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6169"
},
{
"category": "external",
"summary": "RHBZ#217950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=217950"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6169",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6169"
}
],
"release_date": "2006-11-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-12-06T17:53:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": ": gnupg2 \u003c 2.0.1 buffer overflow"
},
{
"cve": "CVE-2006-6235",
"discovery_date": "2006-12-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618242"
}
],
"notes": [
{
"category": "description",
"text": "A \"stack overwrite\" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-6235"
},
{
"category": "external",
"summary": "RHBZ#1618242",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618242"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-6235",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6235"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6235",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6235"
}
],
"release_date": "2006-12-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-12-06T17:53:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"2.1AS:gnupg-0:1.0.7-20.i386",
"2.1AS:gnupg-0:1.0.7-20.ia64",
"2.1AS:gnupg-0:1.0.7-20.src",
"2.1AW:gnupg-0:1.0.7-20.i386",
"2.1AW:gnupg-0:1.0.7-20.ia64",
"2.1AW:gnupg-0:1.0.7-20.src",
"2.1ES:gnupg-0:1.0.7-20.i386",
"2.1ES:gnupg-0:1.0.7-20.ia64",
"2.1ES:gnupg-0:1.0.7-20.src",
"2.1WS:gnupg-0:1.0.7-20.i386",
"2.1WS:gnupg-0:1.0.7-20.ia64",
"2.1WS:gnupg-0:1.0.7-20.src",
"3AS:gnupg-0:1.2.1-19.i386",
"3AS:gnupg-0:1.2.1-19.ia64",
"3AS:gnupg-0:1.2.1-19.ppc",
"3AS:gnupg-0:1.2.1-19.s390",
"3AS:gnupg-0:1.2.1-19.s390x",
"3AS:gnupg-0:1.2.1-19.src",
"3AS:gnupg-0:1.2.1-19.x86_64",
"3AS:gnupg-debuginfo-0:1.2.1-19.i386",
"3AS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3AS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390",
"3AS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3AS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3Desktop:gnupg-0:1.2.1-19.i386",
"3Desktop:gnupg-0:1.2.1-19.ia64",
"3Desktop:gnupg-0:1.2.1-19.ppc",
"3Desktop:gnupg-0:1.2.1-19.s390",
"3Desktop:gnupg-0:1.2.1-19.s390x",
"3Desktop:gnupg-0:1.2.1-19.src",
"3Desktop:gnupg-0:1.2.1-19.x86_64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.i386",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ia64",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.ppc",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.s390x",
"3Desktop:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3ES:gnupg-0:1.2.1-19.i386",
"3ES:gnupg-0:1.2.1-19.ia64",
"3ES:gnupg-0:1.2.1-19.ppc",
"3ES:gnupg-0:1.2.1-19.s390",
"3ES:gnupg-0:1.2.1-19.s390x",
"3ES:gnupg-0:1.2.1-19.src",
"3ES:gnupg-0:1.2.1-19.x86_64",
"3ES:gnupg-debuginfo-0:1.2.1-19.i386",
"3ES:gnupg-debuginfo-0:1.2.1-19.ia64",
"3ES:gnupg-debuginfo-0:1.2.1-19.ppc",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390",
"3ES:gnupg-debuginfo-0:1.2.1-19.s390x",
"3ES:gnupg-debuginfo-0:1.2.1-19.x86_64",
"3WS:gnupg-0:1.2.1-19.i386",
"3WS:gnupg-0:1.2.1-19.ia64",
"3WS:gnupg-0:1.2.1-19.ppc",
"3WS:gnupg-0:1.2.1-19.s390",
"3WS:gnupg-0:1.2.1-19.s390x",
"3WS:gnupg-0:1.2.1-19.src",
"3WS:gnupg-0:1.2.1-19.x86_64",
"3WS:gnupg-debuginfo-0:1.2.1-19.i386",
"3WS:gnupg-debuginfo-0:1.2.1-19.ia64",
"3WS:gnupg-debuginfo-0:1.2.1-19.ppc",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390",
"3WS:gnupg-debuginfo-0:1.2.1-19.s390x",
"3WS:gnupg-debuginfo-0:1.2.1-19.x86_64",
"4AS:gnupg-0:1.2.6-8.i386",
"4AS:gnupg-0:1.2.6-8.ia64",
"4AS:gnupg-0:1.2.6-8.ppc",
"4AS:gnupg-0:1.2.6-8.s390",
"4AS:gnupg-0:1.2.6-8.s390x",
"4AS:gnupg-0:1.2.6-8.src",
"4AS:gnupg-0:1.2.6-8.x86_64",
"4AS:gnupg-debuginfo-0:1.2.6-8.i386",
"4AS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4AS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390",
"4AS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4AS:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4Desktop:gnupg-0:1.2.6-8.i386",
"4Desktop:gnupg-0:1.2.6-8.ia64",
"4Desktop:gnupg-0:1.2.6-8.ppc",
"4Desktop:gnupg-0:1.2.6-8.s390",
"4Desktop:gnupg-0:1.2.6-8.s390x",
"4Desktop:gnupg-0:1.2.6-8.src",
"4Desktop:gnupg-0:1.2.6-8.x86_64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.i386",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ia64",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.ppc",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.s390x",
"4Desktop:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4ES:gnupg-0:1.2.6-8.i386",
"4ES:gnupg-0:1.2.6-8.ia64",
"4ES:gnupg-0:1.2.6-8.ppc",
"4ES:gnupg-0:1.2.6-8.s390",
"4ES:gnupg-0:1.2.6-8.s390x",
"4ES:gnupg-0:1.2.6-8.src",
"4ES:gnupg-0:1.2.6-8.x86_64",
"4ES:gnupg-debuginfo-0:1.2.6-8.i386",
"4ES:gnupg-debuginfo-0:1.2.6-8.ia64",
"4ES:gnupg-debuginfo-0:1.2.6-8.ppc",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390",
"4ES:gnupg-debuginfo-0:1.2.6-8.s390x",
"4ES:gnupg-debuginfo-0:1.2.6-8.x86_64",
"4WS:gnupg-0:1.2.6-8.i386",
"4WS:gnupg-0:1.2.6-8.ia64",
"4WS:gnupg-0:1.2.6-8.ppc",
"4WS:gnupg-0:1.2.6-8.s390",
"4WS:gnupg-0:1.2.6-8.s390x",
"4WS:gnupg-0:1.2.6-8.src",
"4WS:gnupg-0:1.2.6-8.x86_64",
"4WS:gnupg-debuginfo-0:1.2.6-8.i386",
"4WS:gnupg-debuginfo-0:1.2.6-8.ia64",
"4WS:gnupg-debuginfo-0:1.2.6-8.ppc",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390",
"4WS:gnupg-debuginfo-0:1.2.6-8.s390x",
"4WS:gnupg-debuginfo-0:1.2.6-8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0754"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
}
]
}
fkie_cve-2006-6169
Vulnerability from fkie_nvd
Published
2006-11-29 18:28
Modified
2025-04-09 00:30
Severity ?
Summary
Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc | ||
| cve@mitre.org | http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html | ||
| cve@mitre.org | http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html | ||
| cve@mitre.org | http://secunia.com/advisories/23094 | Patch, Vendor Advisory | |
| cve@mitre.org | http://secunia.com/advisories/23110 | ||
| cve@mitre.org | http://secunia.com/advisories/23146 | ||
| cve@mitre.org | http://secunia.com/advisories/23161 | ||
| cve@mitre.org | http://secunia.com/advisories/23171 | ||
| cve@mitre.org | http://secunia.com/advisories/23250 | ||
| cve@mitre.org | http://secunia.com/advisories/23269 | ||
| cve@mitre.org | http://secunia.com/advisories/23284 | ||
| cve@mitre.org | http://secunia.com/advisories/23299 | ||
| cve@mitre.org | http://secunia.com/advisories/23303 | ||
| cve@mitre.org | http://secunia.com/advisories/23513 | ||
| cve@mitre.org | http://secunia.com/advisories/24047 | ||
| cve@mitre.org | http://security.gentoo.org/glsa/glsa-200612-03.xml | ||
| cve@mitre.org | http://securityreason.com/securityalert/1927 | ||
| cve@mitre.org | http://securitytracker.com/id?1017291 | ||
| cve@mitre.org | http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm | ||
| cve@mitre.org | http://www.debian.org/security/2006/dsa-1231 | ||
| cve@mitre.org | http://www.mandriva.com/security/advisories?name=MDKSA-2006:221 | ||
| cve@mitre.org | http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html | ||
| cve@mitre.org | http://www.redhat.com/support/errata/RHSA-2006-0754.html | ||
| cve@mitre.org | http://www.securityfocus.com/archive/1/452829/100/0/threaded | ||
| cve@mitre.org | http://www.securityfocus.com/archive/1/453253/100/100/threaded | ||
| cve@mitre.org | http://www.securityfocus.com/bid/21306 | ||
| cve@mitre.org | http://www.trustix.org/errata/2006/0068/ | ||
| cve@mitre.org | http://www.ubuntu.com/usn/usn-389-1 | ||
| cve@mitre.org | http://www.ubuntu.com/usn/usn-393-2 | ||
| cve@mitre.org | http://www.vupen.com/english/advisories/2006/4736 | ||
| cve@mitre.org | https://bugs.g10code.com/gnupg/issue728 | ||
| cve@mitre.org | https://exchange.xforce.ibmcloud.com/vulnerabilities/30550 | ||
| cve@mitre.org | https://issues.rpath.com/browse/RPL-826 | ||
| cve@mitre.org | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228 | ||
| af854a3a-2127-422b-91ae-364da2661108 | ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23094 | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23110 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23146 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23161 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23171 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23250 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23269 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23284 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23299 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23303 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/23513 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/24047 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-200612-03.xml | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://securityreason.com/securityalert/1927 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://securitytracker.com/id?1017291 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2006/dsa-1231 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDKSA-2006:221 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2006-0754.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/archive/1/452829/100/0/threaded | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/archive/1/453253/100/100/threaded | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/21306 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.trustix.org/errata/2006/0068/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/usn-389-1 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/usn-393-2 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2006/4736 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://bugs.g10code.com/gnupg/issue728 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://exchange.xforce.ibmcloud.com/vulnerabilities/30550 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://issues.rpath.com/browse/RPL-826 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnupg:gnupg:1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "365FF476-1FFD-4E09-900C-50E0660766AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnupg:gnupg:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "47C64072-FC9C-4CA9-9752-3BC08839E319",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer basado en mont\u00edculo en la funci\u00f3n ask_outfile_name en el openfile.c para GnuPG (gpg) 1.4 y 2.0, cuando se est\u00e1 ejecutando interactivamente, podr\u00eda permitir a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante mensajes con expansiones \"C-escape\", que provocan que la funci\u00f3n make_printable_string devuelva una cadena m\u00e1s larga de lo esperado mientras construye un aviso."
}
],
"id": "CVE-2006-6169",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": true,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2006-11-29T18:28:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc"
},
{
"source": "cve@mitre.org",
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"source": "cve@mitre.org",
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/23094"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23110"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23146"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23161"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23171"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23250"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23269"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23284"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23299"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23303"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23513"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/24047"
},
{
"source": "cve@mitre.org",
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"source": "cve@mitre.org",
"url": "http://securityreason.com/securityalert/1927"
},
{
"source": "cve@mitre.org",
"url": "http://securitytracker.com/id?1017291"
},
{
"source": "cve@mitre.org",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"source": "cve@mitre.org",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"source": "cve@mitre.org",
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/21306"
},
{
"source": "cve@mitre.org",
"url": "http://www.trustix.org/errata/2006/0068/"
},
{
"source": "cve@mitre.org",
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"source": "cve@mitre.org",
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2006/4736"
},
{
"source": "cve@mitre.org",
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"source": "cve@mitre.org",
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"source": "cve@mitre.org",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/23094"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23110"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23146"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23161"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23171"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23250"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23269"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23284"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23299"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23303"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23513"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/24047"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securityreason.com/securityalert/1927"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securitytracker.com/id?1017291"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/21306"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.trustix.org/errata/2006/0068/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2006/4736"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
}
],
"sourceIdentifier": "cve@mitre.org",
"vendorComments": [
{
"comment": "Red Hat does not consider this bug to be a security flaw. In order for this flaw to be exploited, a user would be required to enter shellcode into an interactive GnuPG session. Red Hat considers this to be an unlikely scenario.\n\nRed Hat Enterprise Linux 5 contains a backported patch to address this issue.",
"lastModified": "2007-03-14T00:00:00",
"organization": "Red Hat"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
ghsa-5xr2-gxmf-xc8r
Vulnerability from github
Published
2022-05-03 03:16
Modified
2022-05-03 03:16
VLAI Severity ?
Details
Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.
{
"affected": [],
"aliases": [
"CVE-2006-6169"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2006-11-29T18:28:00Z",
"severity": "MODERATE"
},
"details": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.",
"id": "GHSA-5xr2-gxmf-xc8r",
"modified": "2022-05-03T03:16:44Z",
"published": "2022-05-03T03:16:44Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6169"
},
{
"type": "WEB",
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"type": "WEB",
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
},
{
"type": "WEB",
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"type": "WEB",
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23094"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23110"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23146"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23161"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23171"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23250"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23269"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23284"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23299"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23303"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/23513"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/24047"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"type": "WEB",
"url": "http://securityreason.com/securityalert/1927"
},
{
"type": "WEB",
"url": "http://securitytracker.com/id?1017291"
},
{
"type": "WEB",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"type": "WEB",
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/21306"
},
{
"type": "WEB",
"url": "http://www.trustix.org/errata/2006/0068"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2006/4736"
}
],
"schema_version": "1.4.0",
"severity": []
}
opensuse-su-2024:10815-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
dirmngr-2.2.27-2.4 on GA media
Notes
Title of the patch
dirmngr-2.2.27-2.4 on GA media
Description of the patch
These are all security issues fixed in the dirmngr-2.2.27-2.4 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10815
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "dirmngr-2.2.27-2.4 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the dirmngr-2.2.27-2.4 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10815",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10815-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-0455 page",
"url": "https://www.suse.com/security/cve/CVE-2006-0455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-3746 page",
"url": "https://www.suse.com/security/cve/CVE-2006-3746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-6169 page",
"url": "https://www.suse.com/security/cve/CVE-2006-6169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1530 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-12020 page",
"url": "https://www.suse.com/security/cve/CVE-2018-12020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-9234 page",
"url": "https://www.suse.com/security/cve/CVE-2018-9234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14855 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25125 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25125/"
}
],
"title": "dirmngr-2.2.27-2.4 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10815-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "dirmngr-2.2.27-2.4.aarch64",
"product": {
"name": "dirmngr-2.2.27-2.4.aarch64",
"product_id": "dirmngr-2.2.27-2.4.aarch64"
}
},
{
"category": "product_version",
"name": "gpg2-2.2.27-2.4.aarch64",
"product": {
"name": "gpg2-2.2.27-2.4.aarch64",
"product_id": "gpg2-2.2.27-2.4.aarch64"
}
},
{
"category": "product_version",
"name": "gpg2-lang-2.2.27-2.4.aarch64",
"product": {
"name": "gpg2-lang-2.2.27-2.4.aarch64",
"product_id": "gpg2-lang-2.2.27-2.4.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dirmngr-2.2.27-2.4.ppc64le",
"product": {
"name": "dirmngr-2.2.27-2.4.ppc64le",
"product_id": "dirmngr-2.2.27-2.4.ppc64le"
}
},
{
"category": "product_version",
"name": "gpg2-2.2.27-2.4.ppc64le",
"product": {
"name": "gpg2-2.2.27-2.4.ppc64le",
"product_id": "gpg2-2.2.27-2.4.ppc64le"
}
},
{
"category": "product_version",
"name": "gpg2-lang-2.2.27-2.4.ppc64le",
"product": {
"name": "gpg2-lang-2.2.27-2.4.ppc64le",
"product_id": "gpg2-lang-2.2.27-2.4.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "dirmngr-2.2.27-2.4.s390x",
"product": {
"name": "dirmngr-2.2.27-2.4.s390x",
"product_id": "dirmngr-2.2.27-2.4.s390x"
}
},
{
"category": "product_version",
"name": "gpg2-2.2.27-2.4.s390x",
"product": {
"name": "gpg2-2.2.27-2.4.s390x",
"product_id": "gpg2-2.2.27-2.4.s390x"
}
},
{
"category": "product_version",
"name": "gpg2-lang-2.2.27-2.4.s390x",
"product": {
"name": "gpg2-lang-2.2.27-2.4.s390x",
"product_id": "gpg2-lang-2.2.27-2.4.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dirmngr-2.2.27-2.4.x86_64",
"product": {
"name": "dirmngr-2.2.27-2.4.x86_64",
"product_id": "dirmngr-2.2.27-2.4.x86_64"
}
},
{
"category": "product_version",
"name": "gpg2-2.2.27-2.4.x86_64",
"product": {
"name": "gpg2-2.2.27-2.4.x86_64",
"product_id": "gpg2-2.2.27-2.4.x86_64"
}
},
{
"category": "product_version",
"name": "gpg2-lang-2.2.27-2.4.x86_64",
"product": {
"name": "gpg2-lang-2.2.27-2.4.x86_64",
"product_id": "gpg2-lang-2.2.27-2.4.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dirmngr-2.2.27-2.4.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64"
},
"product_reference": "dirmngr-2.2.27-2.4.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dirmngr-2.2.27-2.4.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le"
},
"product_reference": "dirmngr-2.2.27-2.4.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dirmngr-2.2.27-2.4.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x"
},
"product_reference": "dirmngr-2.2.27-2.4.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dirmngr-2.2.27-2.4.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64"
},
"product_reference": "dirmngr-2.2.27-2.4.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-2.2.27-2.4.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64"
},
"product_reference": "gpg2-2.2.27-2.4.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-2.2.27-2.4.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le"
},
"product_reference": "gpg2-2.2.27-2.4.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-2.2.27-2.4.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x"
},
"product_reference": "gpg2-2.2.27-2.4.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-2.2.27-2.4.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64"
},
"product_reference": "gpg2-2.2.27-2.4.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-lang-2.2.27-2.4.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64"
},
"product_reference": "gpg2-lang-2.2.27-2.4.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-lang-2.2.27-2.4.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le"
},
"product_reference": "gpg2-lang-2.2.27-2.4.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-lang-2.2.27-2.4.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x"
},
"product_reference": "gpg2-lang-2.2.27-2.4.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gpg2-lang-2.2.27-2.4.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
},
"product_reference": "gpg2-lang-2.2.27-2.4.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-0455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-0455"
}
],
"notes": [
{
"category": "general",
"text": "gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command \"gpg --verify\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-0455",
"url": "https://www.suse.com/security/cve/CVE-2006-0455"
},
{
"category": "external",
"summary": "SUSE Bug 150742 for CVE-2006-0455",
"url": "https://bugzilla.suse.com/150742"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2006-0455"
},
{
"cve": "CVE-2006-3746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-3746"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-3746",
"url": "https://www.suse.com/security/cve/CVE-2006-3746"
},
{
"category": "external",
"summary": "SUSE Bug 195569 for CVE-2006-3746",
"url": "https://bugzilla.suse.com/195569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-3746"
},
{
"cve": "CVE-2006-6169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-6169"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-6169",
"url": "https://www.suse.com/security/cve/CVE-2006-6169"
},
{
"category": "external",
"summary": "SUSE Bug 224108 for CVE-2006-6169",
"url": "https://bugzilla.suse.com/224108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-6169"
},
{
"cve": "CVE-2008-1530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1530"
}
],
"notes": [
{
"category": "general",
"text": "GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers \"memory corruption around deduplication of user IDs.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1530",
"url": "https://www.suse.com/security/cve/CVE-2008-1530"
},
{
"category": "external",
"summary": "SUSE Bug 374254 for CVE-2008-1530",
"url": "https://bugzilla.suse.com/374254"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2008-1530"
},
{
"cve": "CVE-2018-12020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-12020"
}
],
"notes": [
{
"category": "general",
"text": "mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the \"--status-fd 2\" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-12020",
"url": "https://www.suse.com/security/cve/CVE-2018-12020"
},
{
"category": "external",
"summary": "SUSE Bug 1096745 for CVE-2018-12020",
"url": "https://bugzilla.suse.com/1096745"
},
{
"category": "external",
"summary": "SUSE Bug 1101134 for CVE-2018-12020",
"url": "https://bugzilla.suse.com/1101134"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-12020"
},
{
"cve": "CVE-2018-9234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-9234"
}
],
"notes": [
{
"category": "general",
"text": "GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-9234",
"url": "https://www.suse.com/security/cve/CVE-2018-9234"
},
{
"category": "external",
"summary": "SUSE Bug 1088255 for CVE-2018-9234",
"url": "https://bugzilla.suse.com/1088255"
},
{
"category": "external",
"summary": "SUSE Bug 1090647 for CVE-2018-9234",
"url": "https://bugzilla.suse.com/1090647"
},
{
"category": "external",
"summary": "SUSE Bug 1217431 for CVE-2018-9234",
"url": "https://bugzilla.suse.com/1217431"
},
{
"category": "external",
"summary": "SUSE Bug 1217437 for CVE-2018-9234",
"url": "https://bugzilla.suse.com/1217437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-9234"
},
{
"cve": "CVE-2019-14855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14855"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14855",
"url": "https://www.suse.com/security/cve/CVE-2019-14855"
},
{
"category": "external",
"summary": "SUSE Bug 1157900 for CVE-2019-14855",
"url": "https://bugzilla.suse.com/1157900"
},
{
"category": "external",
"summary": "SUSE Bug 1160243 for CVE-2019-14855",
"url": "https://bugzilla.suse.com/1160243"
},
{
"category": "external",
"summary": "SUSE Bug 1181233 for CVE-2019-14855",
"url": "https://bugzilla.suse.com/1181233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-14855"
},
{
"cve": "CVE-2020-25125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25125"
}
],
"notes": [
{
"category": "general",
"text": "GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker\u0027s OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25125",
"url": "https://www.suse.com/security/cve/CVE-2020-25125"
},
{
"category": "external",
"summary": "SUSE Bug 1176034 for CVE-2020-25125",
"url": "https://bugzilla.suse.com/1176034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:dirmngr-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-2.2.27-2.4.x86_64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.aarch64",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.ppc64le",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.s390x",
"openSUSE Tumbleweed:gpg2-lang-2.2.27-2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-25125"
}
]
}
gsd-2006-6169
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2006-6169",
"description": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.",
"id": "GSD-2006-6169",
"references": [
"https://www.suse.com/security/cve/CVE-2006-6169.html",
"https://www.debian.org/security/2006/dsa-1231",
"https://access.redhat.com/errata/RHSA-2006:0754",
"https://linux.oracle.com/cve/CVE-2006-6169.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2006-6169"
],
"details": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.",
"id": "GSD-2006-6169",
"modified": "2023-12-13T01:19:54.445987Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6169",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "23110",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23110"
},
{
"name": "23269",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23269"
},
{
"name": "23303",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23303"
},
{
"name": "20061127 GnuPG 1.4 and 2.0 buffer overflow",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
},
{
"name": "https://issues.rpath.com/browse/RPL-826",
"refsource": "CONFIRM",
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"name": "gnupg-openfile-bo(30550)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"name": "23513",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23513"
},
{
"name": "23284",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23284"
},
{
"name": "23146",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23146"
},
{
"name": "23171",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23171"
},
{
"name": "USN-393-2",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"name": "RHSA-2006:0754",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"name": "2006-0068",
"refsource": "TRUSTIX",
"url": "http://www.trustix.org/errata/2006/0068/"
},
{
"name": "1927",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/1927"
},
{
"name": "DSA-1231",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"name": "23299",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23299"
},
{
"name": "USN-389-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"name": "https://bugs.g10code.com/gnupg/issue728",
"refsource": "MISC",
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"name": "1017291",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1017291"
},
{
"name": "GLSA-200612-03",
"refsource": "GENTOO",
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"name": "[gnupg-announce] 20061127 GnuPG 1.4 and 2.0 buffer overflow",
"refsource": "MLIST",
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"name": "23094",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23094"
},
{
"name": "SUSE-SA:2006:075",
"refsource": "SUSE",
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm",
"refsource": "CONFIRM",
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"name": "20061201 rPSA-2006-0224-1 gnupg",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"name": "21306",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21306"
},
{
"name": "ADV-2006-4736",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/4736"
},
{
"name": "23250",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23250"
},
{
"name": "20061201-01-P",
"refsource": "SGI",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc"
},
{
"name": "23161",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23161"
},
{
"name": "MDKSA-2006:221",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"name": "OpenPKG-SA-2006.037",
"refsource": "OPENPKG",
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"name": "oval:org.mitre.oval:def:11228",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
},
{
"name": "24047",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24047"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:gnupg:gnupg:1.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnupg:gnupg:2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-6169"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with \"C-escape\" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugs.g10code.com/gnupg/issue728",
"refsource": "MISC",
"tags": [],
"url": "https://bugs.g10code.com/gnupg/issue728"
},
{
"name": "1017291",
"refsource": "SECTRACK",
"tags": [],
"url": "http://securitytracker.com/id?1017291"
},
{
"name": "23094",
"refsource": "SECUNIA",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/23094"
},
{
"name": "[gnupg-announce] 20061127 GnuPG 1.4 and 2.0 buffer overflow",
"refsource": "MLIST",
"tags": [],
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
},
{
"name": "USN-389-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/usn-389-1"
},
{
"name": "21306",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/21306"
},
{
"name": "23110",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23110"
},
{
"name": "https://issues.rpath.com/browse/RPL-826",
"refsource": "CONFIRM",
"tags": [],
"url": "https://issues.rpath.com/browse/RPL-826"
},
{
"name": "2006-0068",
"refsource": "TRUSTIX",
"tags": [],
"url": "http://www.trustix.org/errata/2006/0068/"
},
{
"name": "23171",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23171"
},
{
"name": "23146",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23146"
},
{
"name": "23161",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23161"
},
{
"name": "RHSA-2006:0754",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0754.html"
},
{
"name": "23250",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23250"
},
{
"name": "23269",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23269"
},
{
"name": "DSA-1231",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2006/dsa-1231"
},
{
"name": "GLSA-200612-03",
"refsource": "GENTOO",
"tags": [],
"url": "http://security.gentoo.org/glsa/glsa-200612-03.xml"
},
{
"name": "OpenPKG-SA-2006.037",
"refsource": "OPENPKG",
"tags": [],
"url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html"
},
{
"name": "USN-393-2",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/usn-393-2"
},
{
"name": "23299",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23299"
},
{
"name": "23303",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23303"
},
{
"name": "SUSE-SA:2006:075",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html"
},
{
"name": "23284",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23284"
},
{
"name": "20061201-01-P",
"refsource": "SGI",
"tags": [],
"url": "ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc"
},
{
"name": "23513",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/23513"
},
{
"name": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm",
"refsource": "CONFIRM",
"tags": [],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm"
},
{
"name": "24047",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/24047"
},
{
"name": "MDKSA-2006:221",
"refsource": "MANDRIVA",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:221"
},
{
"name": "1927",
"refsource": "SREASON",
"tags": [],
"url": "http://securityreason.com/securityalert/1927"
},
{
"name": "ADV-2006-4736",
"refsource": "VUPEN",
"tags": [],
"url": "http://www.vupen.com/english/advisories/2006/4736"
},
{
"name": "gnupg-openfile-bo(30550)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30550"
},
{
"name": "oval:org.mitre.oval:def:11228",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228"
},
{
"name": "20061201 rPSA-2006-0224-1 gnupg",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://www.securityfocus.com/archive/1/453253/100/100/threaded"
},
{
"name": "20061127 GnuPG 1.4 and 2.0 buffer overflow",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://www.securityfocus.com/archive/1/452829/100/0/threaded"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": true,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2018-10-17T21:47Z",
"publishedDate": "2006-11-29T18:28Z"
}
}
}
CERTA-2006-AVI-523
Vulnerability from certfr_avis
Une vulnérabilité a été découverte dans GnuPG. Cette vulnérabilité permet à un utilisateur mal intentionné d'exécuter du code arbitraire à distance.
Description
GnuPG est un outil de chiffrement sous licence GNU.
Une vulnérabilité a été découverte dans GnuPG. Cette vulnérabilité, résultant d'une erreur aux limites dans la fonction ask_outfile_name(), peut être exploitée par un attaquant afin d'exécuter du code arbitraire sur la machine cible.
Cette vulnérabilité n'est exploitable que si le mode interactif est utilisé.
Solution
Appliquer le correctif fourni par l'éditeur (cf. Documentation).
GnuPG versions 1.4 et 2.0.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eGnuPG versions 1.4 et 2.0.\u003c/p\u003e",
"content": "## Description\n\nGnuPG est un outil de chiffrement sous licence GNU.\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans GnuPG. Cette vuln\u00e9rabilit\u00e9,\nr\u00e9sultant d\u0027une erreur aux limites dans la fonction ask_outfile_name(),\npeut \u00eatre exploit\u00e9e par un attaquant afin d\u0027ex\u00e9cuter du code arbitraire\nsur la machine cible.\n\nCette vuln\u00e9rabilit\u00e9 n\u0027est exploitable que si le mode interactif est\nutilis\u00e9.\n\n## Solution\n\nAppliquer le correctif fourni par l\u0027\u00e9diteur (cf. Documentation).\n",
"cves": [
{
"name": "CVE-2006-6169",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6169"
}
],
"initial_release_date": "2006-12-04T00:00:00",
"last_revision_date": "2006-12-04T00:00:00",
"links": [
{
"title": "Correctif de l\u0027\u00e9diteur:",
"url": "http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/branches/STABLE-BRANCH-1-4/g10/openfile.c?rev=4349\u0026r1=4215\u0026r2=4349"
}
],
"reference": "CERTA-2006-AVI-523",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2006-12-04T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans GnuPG. Cette vuln\u00e9rabilit\u00e9\npermet \u00e0 un utilisateur mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n",
"title": "Vuln\u00e9rabilit\u00e9 du logiciel GnuPG",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 GnuPG",
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…