Description
The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gnupg2 | 1.9.15-1 | — |
| Debian 13 | gnupg2 | 1.9.15-1 | — |
| Debian 12 | gnupg2 | 1.9.15-1 | — |
References
- [gpa-dev] 20050603 Re: S/MIME signing fails on a SUSE 9.3 system mailing-list
- [gpa-dev] 20050531 S/MIME signing fails on a SUSE 9.3 system mailing-list
- [gpa-dev] 20050603 Re: S/MIME signing fails on a SUSE 9.3 system mailing-list
- SUSE-SR:2005:016 vendor-advisory