Skip to content
OpenAdvisories
Unscored RHSA-2013:1459 3 CVEs

Red Hat Security Advisory: gnupg2 security update

Published Sep 15, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client gnupg2 0:2.0.10-6.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client gnupg2-debuginfo 0:2.0.10-6.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnupg2 0:2.0.10-6.el5_10
Red Hat · RHEL 5 enterprise_linux:5::server gnupg2-debuginfo 0:2.0.10-6.el5_10
Red Hat · RHEL 6 enterprise_linux:6::client gnupg2 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client gnupg2-debuginfo 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::client gnupg2-smime 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode gnupg2 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode gnupg2-debuginfo 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::computenode gnupg2-smime 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server gnupg2 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server gnupg2-debuginfo 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::server gnupg2-smime 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation gnupg2 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation gnupg2-debuginfo 0:2.0.14-6.el6_4
Red Hat · RHEL 6 enterprise_linux:6::workstation gnupg2-smime 0:2.0.14-6.el6_4

Vulnerabilities 3

  • Unscored —
    CVE-2012-6085

    The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, al…

    gnupg2 Debian
  • Unscored —
    CVE-2013-4351

    GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all …

    gnupg2 Debian
  • Unscored —
    CVE-2013-4402

    The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a de…

    gnupg2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1010137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1015685
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1459.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-6085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-6085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-6085
  • report
    https://access.redhat.com/security/cve/CVE-2013-4351
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4351
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4351
  • report
    https://access.redhat.com/security/cve/CVE-2013-4402
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4402
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4402