[Bug 1097188] Re: gnupg key import memory corruption

Wed Jan 9 13:29:16 UTC 2013

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnupg in Ubuntu.
https://bugs.launchpad.net/bugs/1097188

Title:
  gnupg key import memory corruption

Status in “gnupg” package in Ubuntu:
  Confirmed
Status in “gnupg2” package in Ubuntu:
  Confirmed

Bug description:
  Memory and key database corruption when importing with invalid keys.
  See http://seclists.org/bugtraq/2012/Dec/151 and http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-6085.html

  A fix has been released by upstream.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnupg/+bug/1097188/+subscriptions