GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability

Bugtraq ID:	41945
Class:	Unknown
CVE:	CVE-2010-2547
Remote:	Yes
Local:	No
Published:	Jul 23 2010 12:00AM
Updated:	Apr 13 2015 10:02PM
Credit:	Peter Gutmann
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 SuSE SUSE Linux Enterprise 10 SuSE Moblin 2.0 Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux -current S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 rPath rPath Linux 2 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gnupg Gnupg 2.0.16 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	Gnupg Gnupg 2.0.17

GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability

GnuPG is prone to a remote code execution vulnerability because it fails to properly sanitize user-supplied input.

An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application.

GnuPG 2.x versions prior to and including 2.0.16 are vulnerable.

GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu gnupg-agent_2.0.12-0ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.12-0ubuntu2 .1_sparc.deb


• Ubuntu gnupg2_2.0.12-0ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.12-0ubuntu2.1_sp arc.deb


• Ubuntu gpgsm_2.0.12-0ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.12-0ubuntu2.1 _sparc.deb

Slackware Linux 12.0

• Slackware gnupg2-2.0.4-i486-2_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ gnupg2-2.0.4-i486-2_slack12.0.tgz

Debian Linux 5.0 ia-64

• Debian gnupg-agent_2.0.9-3.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_ia64.deb


• Debian gnupg2_2.0.9-3.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_ia64.deb


• Debian gpgsm_2.0.9-3.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_ia64.deb

Slackware Linux -current

• Slackware gnupg2-2.0.16-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/gn upg2-2.0.16-i486-1.txz

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu gnupg-agent_2.0.7-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.7-1ubuntu0. 1_powerpc.deb


• Ubuntu gnupg2_2.0.7-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gnupg2_2.0.7-1ubuntu0.1 _powerpc.deb


• Ubuntu gpgsm_2.0.7-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gpgsm_2.0.7-1ubuntu0.1_powe rpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu gnupg-agent_2.0.7-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.7-1ubuntu0. 1_sparc.deb


• Ubuntu gnupg2_2.0.7-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gnupg2_2.0.7-1ubuntu0.1 _sparc.deb


• Ubuntu gpgsm_2.0.7-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gpgsm_2.0.7-1ubuntu0.1_spar c.deb

Slackware Linux 12.2

• Slackware gnupg2-2.0.9-i486-2_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ gnupg2-2.0.9-i486-2_slack12.2.tgz

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu gnupg-agent_2.0.12-0ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.12-0ubuntu2 .1_powerpc.deb


• Ubuntu gnupg2_2.0.12-0ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.12-0ubuntu2.1_po werpc.deb


• Ubuntu gpgsm_2.0.12-0ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.12-0ubuntu2.1 _powerpc.deb

Debian Linux 5.0 alpha

• Debian gnupg-agent_2.0.9-3.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_alpha.deb


• Debian gnupg2_2.0.9-3.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_alpha.deb


• Debian gpgsm_2.0.9-3.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_alpha.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva gnupg2-2.0.5-3.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu gnupg-agent_2.0.7-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.7 -1ubuntu0.1_amd64.deb


• Ubuntu gnupg2_2.0.7-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gnupg2_2.0.7- 1ubuntu0.1_amd64.deb


• Ubuntu gpgsm_2.0.7-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gpgsm_2.0.7-1ubun tu0.1_amd64.deb

Mandriva Linux Mandrake 2008.0

• Mandriva gnupg2-2.0.5-3.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Slackware Linux 13.1 x86_64

• Slackware gnupg2-2.0.14-x86_64-3_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/gnupg2-2.0.14-x86_64-3_slack13.1.txz

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu gnupg-agent_2.0.12-0ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.12-0ubuntu2 .1_lpia.deb


• Ubuntu gnupg2_2.0.12-0ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.12-0ubuntu2.1_lp ia.deb


• Ubuntu gpgsm_2.0.12-0ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.12-0ubuntu2.1 _lpia.deb

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva gnupg2-2.0.15-11.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian gnupg-agent_2.0.9-3.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_mipsel.deb


• Debian gnupg2_2.0.9-3.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_mipsel.deb


• Debian gpgsm_2.0.9-3.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_mipsel.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu gnupg-agent_2.0.9-3.1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.9-3.1ubuntu 0.1_sparc.deb


• Ubuntu gnupg2_2.0.9-3.1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.9-3.1ubuntu0.1_s parc.deb


• Ubuntu gpgsm_2.0.9-3.1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.9-3.1ubuntu0. 1_sparc.deb

Slackware Linux 13.1

• Slackware gnupg2-2.0.14-i486-3_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ gnupg2-2.0.14-i486-3_slack13.1.txz

Mandriva Linux Mandrake 2010.0

• Mandriva gnupg2-2.0.13-1.5mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu gnupg-agent_2.0.9-3.1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.9-3.1ubuntu 0.1_powerpc.deb


• Ubuntu gnupg2_2.0.9-3.1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.9-3.1ubuntu0.1_p owerpc.deb


• Ubuntu gpgsm_2.0.9-3.1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.9-3.1ubuntu0. 1_powerpc.deb

Slackware Linux 12.1

• Slackware gnupg2-2.0.9-i486-2_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ gnupg2-2.0.9-i486-2_slack12.1.tgz

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu gnupg-agent_2.0.14-1ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.14-1ubuntu1 .2_powerpc.deb


• Ubuntu gnupg2_2.0.14-1ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.14-1ubuntu1.2_po werpc.deb


• Ubuntu gpgsm_2.0.14-1ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.14-1ubuntu1.2 _powerpc.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu gnupg-agent_2.0.9-3.1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.9 -3.1ubuntu0.1_i386.deb


• Ubuntu gnupg2_2.0.9-3.1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg2_2.0.9-3.1u buntu0.1_i386.deb


• Ubuntu gpgsm_2.0.9-3.1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gpgsm_2.0.9-3 .1ubuntu0.1_i386.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu gnupg-agent_2.0.9-3.1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.9-3.1ubuntu 0.1_lpia.deb


• Ubuntu gnupg2_2.0.9-3.1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.9-3.1ubuntu0.1_l pia.deb


• Ubuntu gpgsm_2.0.9-3.1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.9-3.1ubuntu0. 1_lpia.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu gnupg-agent_2.0.12-0ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.1 2-0ubuntu2.1_i386.deb


• Ubuntu gnupg2_2.0.12-0ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg2_2.0.12-0ub untu2.1_i386.deb


• Ubuntu gpgsm_2.0.12-0ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gpgsm_2.0.12- 0ubuntu2.1_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu gnupg-agent_2.0.14-1ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.1 4-1ubuntu1.2_amd64.deb


• Ubuntu gnupg2_2.0.14-1ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg2_2.0.14-1ub untu1.2_amd64.deb


• Ubuntu gpgsm_2.0.14-1ubuntu1.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gpgsm_2.0.14- 1ubuntu1.2_amd64.deb

Debian Linux 5.0 armel

• Debian gnupg-agent_2.0.9-3.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_armel.deb


• Debian gnupg2_2.0.9-3.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_armel.deb


• Debian gpgsm_2.0.9-3.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_armel.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu gnupg-agent_2.0.12-0ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.1 2-0ubuntu2.1_amd64.deb


• Ubuntu gnupg2_2.0.12-0ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg2_2.0.12-0ub untu2.1_amd64.deb


• Ubuntu gpgsm_2.0.12-0ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gpgsm_2.0.12- 0ubuntu2.1_amd64.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva gnupg2-2.0.9-3.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian gnupg-agent_2.0.9-3.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_mips.deb


• Debian gnupg2_2.0.9-3.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_mips.deb


• Debian gpgsm_2.0.9-3.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_mips.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu gnupg-agent_2.0.9-3.1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.9 -3.1ubuntu0.1_amd64.deb


• Ubuntu gnupg2_2.0.9-3.1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg2_2.0.9-3.1u buntu0.1_amd64.deb


• Ubuntu gpgsm_2.0.9-3.1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gpgsm_2.0.9-3 .1ubuntu0.1_amd64.deb

Mandriva Linux Mandrake 2009.1

• Mandriva gnupg2-2.0.11-1.4mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 sparc

• Debian gnupg-agent_2.0.9-3.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_sparc.deb


• Debian gnupg2_2.0.9-3.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_sparc.deb


• Debian gpgsm_2.0.9-3.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_sparc.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu gnupg-agent_2.0.14-1ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.1 4-1ubuntu1.2_i386.deb


• Ubuntu gnupg2_2.0.14-1ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg2_2.0.14-1ub untu1.2_i386.deb


• Ubuntu gpgsm_2.0.14-1ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gpgsm_2.0.14- 1ubuntu1.2_i386.deb

Slackware Linux x86_64 -current

• Slackware gnupg2-2.0.16-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ n/gnupg2-2.0.16-x86_64-1.txz

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva gnupg2-2.0.11-1.4mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva gnupg2-2.0.9-3.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 ia-32

• Debian gnupg-agent_2.0.9-3.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_i386.deb


• Debian gnupg2_2.0.9-3.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_i386.deb


• Debian gpgsm_2.0.9-3.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_i386.deb

MandrakeSoft Enterprise Server 5

• Mandriva gnupg2-2.0.9-3.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian gnupg-agent_2.0.9-3.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_s390.deb


• Debian gnupg2_2.0.9-3.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_s390.deb


• Debian gpgsm_2.0.9-3.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu gnupg-agent_2.0.7-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.7-1ubuntu0. 1_lpia.deb


• Ubuntu gnupg2_2.0.7-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gnupg2_2.0.7-1ubuntu0.1 _lpia.deb


• Ubuntu gpgsm_2.0.7-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gpgsm_2.0.7-1ubuntu0.1_lpia .deb

Slackware Linux 13.0 x86_64

• Slackware gnupg2-2.0.12-x86_64-2_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/gnupg2-2.0.12-x86_64-2_slack13.0.txz

Mandriva Linux Mandrake 2010.0 x86_64

• Mandriva gnupg2-2.0.13-1.5mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 hppa

• Debian gnupg-agent_2.0.9-3.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_hppa.deb


• Debian gnupg2_2.0.9-3.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_hppa.deb


• Debian gpgsm_2.0.9-3.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_hppa.deb

Mandriva Linux Mandrake 2010.1

• Mandriva gnupg2-2.0.15-11.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 arm

• Debian gnupg-agent_2.0.9-3.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_arm.deb


• Debian gnupg2_2.0.9-3.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_arm.deb


• Debian gpgsm_2.0.9-3.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_arm.deb

Mandriva Linux Mandrake 2009.0

• Mandriva gnupg2-2.0.9-3.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Slackware Linux 13.0

• Slackware gnupg2-2.0.12-i486-2_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ gnupg2-2.0.12-i486-2_slack13.0.txz

MandrakeSoft Corporate Server 4.0

• Mandriva gnupg2-1.9.16-4.5.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu gnupg-agent_2.0.7-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gnupg-agent_2.0.7 -1ubuntu0.1_i386.deb


• Ubuntu gnupg2_2.0.7-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/gnupg2/gnupg2_2.0.7- 1ubuntu0.1_i386.deb


• Ubuntu gpgsm_2.0.7-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/gnupg2/gpgsm_2.0.7-1ubun tu0.1_i386.deb

Debian Linux 5.0 amd64

• Debian gnupg-agent_2.0.9-3.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_amd64.deb


• Debian gnupg2_2.0.9-3.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_amd64.deb


• Debian gpgsm_2.0.9-3.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_amd64.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu gnupg-agent_2.0.14-1ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg-agent_2.0.14-1ubuntu1 .2_sparc.deb


• Ubuntu gnupg2_2.0.14-1ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/g/gnupg2/gnupg2_2.0.14-1ubuntu1.2_sp arc.deb


• Ubuntu gpgsm_2.0.14-1ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/g/gnupg2/gpgsm_2.0.14-1ubuntu1.2 _sparc.deb

Debian Linux 5.0 powerpc

• Debian gnupg-agent_2.0.9-3.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg-agent_2.0. 9-3.1+lenny1_powerpc.deb


• Debian gnupg2_2.0.9-3.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gnupg2_2.0.9-3.1 +lenny1_powerpc.deb


• Debian gpgsm_2.0.9-3.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/g/gnupg2/gpgsm_2.0.9-3.1+ lenny1_powerpc.deb

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva gnupg2-1.9.16-4.5.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability

References:

• Security Alert for GnuPG (GnuPG)
  
• The GNU Privacy Guard (GnuPG)