Skip to content
OpenAdvisories
Unscored RHSA-2013:1458 4 CVEs

Red Hat Security Advisory: gnupg security update

Published Sep 15, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client gnupg 0:1.4.5-18.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client gnupg-debuginfo 0:1.4.5-18.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnupg 0:1.4.5-18.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnupg-debuginfo 0:1.4.5-18.el5_10

Vulnerabilities 4

  • Unscored —
    CVE-2012-6085

    The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, al…

    gnupg2 Debian
  • Unscored —
    CVE-2013-4242

    GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users …

  • Unscored —
    CVE-2013-4351

    GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all …

    gnupg2 Debian
  • Unscored —
    CVE-2013-4402

    The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a de…

    gnupg2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=988589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1010137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1015685
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1458.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-6085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-6085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-6085
  • report
    https://access.redhat.com/security/cve/CVE-2013-4242
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4242
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4242
  • article
    http://eprint.iacr.org/2013/448
  • report
    https://access.redhat.com/security/cve/CVE-2013-4351
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4351
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4351
  • report
    https://access.redhat.com/security/cve/CVE-2013-4402
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4402
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4402