#773 ✓verified
steve

Update GnuPG 2.2.40 (CVE-2022-3515)

Reported by steve | October 18th, 2022 @ 01:10 AM | in 2.2.X

GnuPG (LTS) 2.2.40 2022-10-10
Libksba 1.6.2 (CVE-2022-3515)

GnuPG-bug-id: 6230 (https://dev.gnupg.org/T6230)
CVE ........: CVE-2022-3515
CVSS .......: 8.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Other-IDs ..: ZDI-CAN-18927, ZDI-CAN-18928, ZDI-CAN-18927

Comments and changes to this ticket

  • steve
  • steve

    steve October 18th, 2022 @ 01:13 AM

    • State changed from “fixed” to “verified”

    verified

    macOS 12.6
    GPG Suite 2022.1 3154n
    MacGPG 2.2.40

    gpgconf --show-versions
    * GnuPG 2.2.40 (2e9f8a511)
    Darwin
    
    * Libgcrypt 1.8.9 (fdb05b27)
    version:1.8.9:10809:1.45:12d00:
    cc:40201:clang:Apple LLVM 13.1.6 (clang-1316.0.21.2.5):
    ciphers:arcfour:blowfish:cast5:des:aes:twofish:serpent:rfc2268:seed:camellia:idea:salsa20:gost28147:chacha20:
    pubkeys:dsa:elgamal:rsa:ecc:
    digests:crc:gostr3411-94::md4:md5:rmd160:sha1:sha256:sha512:sha3:tiger:whirlpool:stribog:blake2:
    rnd-mod:linux:
    cpu-arch:x86:
    mpi-asm:amd64/mpih-add1.S:amd64/mpih-sub1.S:amd64/mpih-mul1.S:amd64/mpih-mul2.S:amd64/mpih-mul3.S:amd64/mpih-lshift.S:amd64/mpih-rshift.S:
    hwflist:intel-cpu:intel-fast-shld:intel-bmi2:intel-ssse3:intel-sse4.1:intel-pclmul:intel-aesni:intel-rdrand:intel-avx:intel-avx2:intel-fast-vpgather:intel-rdtsc:
    fips-mode:n:n:
    rng-type:standard:1:2010000:1:
    
    * GpgRT 1.45 (dbac537)
    
    * Libassuan 2.5.5 (f8cfb56)
    
    * KSBA 1.6.2 (2981495)
    
    * GNUTLS 3.6.16
    
  • Support

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Shared Ticket Bins

People watching this ticket

Tags

Pages