Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.852024
Kategorie:SuSE Local Security Checks
Titel:openSUSE: Security Advisory for python-python-gnupg (openSUSE-SU-2018:1722-1)
Zusammenfassung:The remote host is missing an update for the 'python-python-gnupg'; package(s) announced via the openSUSE-SU-2018:1722-1 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'python-python-gnupg'
package(s) announced via the openSUSE-SU-2018:1722-1 advisory.

Vulnerability Insight:
This update for python-python-gnupg to version 0.4.3 fixes the following
issues:

The following security vulnerabilities were addressed:

- Sanitize diagnostic output of the original file name in verbose mode
(CVE-2018-12020 boo#1096745)

The following other changes were made:

- Add --no-verbose to the gpg command line, in case verbose is specified
is gpg.conf.

- Add expect_passphrase password for use on GnuPG = 2.1 when passing
passphrase to gpg via pinentry

- Provide a trust_keys method to allow setting the trust level for keys

- When the gpg executable is not found, note the path used in the
exception message

- Make error messages more informational

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended
installation methods
like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.0:

zypper in -t patch openSUSE-2018-646=1

Affected Software/OS:
python-python-gnupg on openSUSE Leap 15.0.

Solution:
Please install the updated package(s).

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2018-12020
CopyrightCopyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.