Errata overview
Errata ID 137
Date 2015-03-25
Source package gnupg
Fixed in version 1.4.12-7.66.201503191340
Description
Multiple security issues have been found in GnuPG:
* use after free when using non-standard keyring (CVE-2015-1606)
* Side-channel attack on El-Gamal keys (CVE-2014-3591)
* Side-channel attack in the mpi_pow() function (CVE-2015-0837)
Additional notes
CVE ID CVE-2015-1606
CVE-2014-3591
CVE-2015-0837
UCS Bug number #37841