From 3b41816b2667c9ebda194c65f6b422199e4a8a0e Mon Sep 17 00:00:00 2001 From: "Simon L. B. Nielsen" Date: Tue, 28 Nov 2006 13:45:13 +0000 Subject: [PATCH] In latest gnupg entry: - Use "Werner Koch reports" instead of "Author reports" to follow normal style in vuln.xml. - Fix some indentation and markup in body. --- security/vuxml/vuln.xml | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index edfa11f3181e..30dbcb7126a2 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -44,17 +44,15 @@ Note: Please add new entries to the beginning of this file. -

Author reports:

+

Werner Koch reports:

-

When running GnuPG interactively, special crafted messages may be used -to crash gpg or gpg2. Running gpg in batch mode, as done by all -software using gpg as a backend (e.g. mailers), is not affected by -this bug. - -Exploiting this overflow seems to be possible. - -gpg-agent, gpgsm, gpgv or other tools from the GnuPG suite are not -affected.

+

When running GnuPG interactively, special crafted + messages may be used to crash gpg or gpg2. Running gpg in + batch mode, as done by all software using gpg as a backend + (e.g. mailers), is not affected by this bug.

+

Exploiting this overflow seems to be possible.

+

gpg-agent, gpgsm, gpgv or other tools from the GnuPG + suite are not affected.