| Summary: | libgcrypt new security issue CVE-2015-7511 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | major | ||
| Priority: | Normal | CC: | sysadmin-bugs, wilcal.int |
| Version: | 5 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| URL: | http://lwn.net/Vulnerabilities/675368/ | ||
| Whiteboard: | has_procedure advisory MGA5-32-OK MGA5-64-OK | ||
| Source RPM: | libgcrypt-1.5.4-5.mga5.src.rpm | CVE: | |
| Status comment: | |||
| Bug Depends on: | |||
| Bug Blocks: | 16806 | ||
|
Description
David Walser
2016-02-12 19:43:30 CET
Testing procedure: https://bugs.mageia.org/show_bug.cgi?id=15441#c2 Use gpg2 (gnupg2) to test libgcrypt. Blocks:
(none) =>
16806 In VirtualBox, M5, KDE, 32-bit Package(s) under test: libgcrypt11 kgpg default install of libgcrypt11 & kgpg [root@localhost wilcal]# urpmi libgcrypt11 Package libgcrypt11-1.5.3-1.mga3.i586 is already installed [root@localhost wilcal]# urpmi kgpg Package kgpg-4.10.5-1.1.mga3.i586 is already installed gpg --gen-key ( works, wiggle the mouse, takes about a min ) Real name: wilcal e-mail: somebody@gmail.com Comment: testing passphrase: testing gpg2 --list-keys ( works ) gpg2 -e -r wilcal test.txt ( works, generates test.txt.gpg ) erase test.txt gpg2 test.txt.gpg ( works, regenerates test.txt ) libreoffice --writer exports an encrypted pdf file gpg2 --delete-secret-keys wilcal ( works ) gpg2 --delete-key wilcal ( works ) gpg2 --list-keys ( works, no keys listed ) install libgcrypt11 & kgpg from updates_testing [root@localhost wilcal]# urpmi libgcrypt11 Package libgcrypt11-1.5.4-5.2.mga5.i586 is already installed [root@localhost wilcal]# urpmi kgpg Package kgpg-4.14.3-1.mga5.i586 is already installed gpg --gen-key ( works, wiggle the mouse, takes about a min ) Real name: wilcal e-mail: somebody@gmail.com Comment: testing passphrase: testing gpg2 --list-keys ( works ) gpg2 -e -r wilcal test.txt ( works, generates test.txt.gpg ) erase test.txt gpg2 test.txt.gpg ( works, regenerates test.txt ) libreoffice --writer exports an encrypted pdf file gpg2 --delete-secret-keys wilcal ( works ) gpg2 --delete-key wilcal ( works ) gpg2 --list-keys ( works, no keys listed ) CC:
(none) =>
wilcal.int Correction: In VirtualBox, M5, KDE, 32-bit default install of libgcrypt11 & kgpg [root@localhost wilcal]# urpmi libgcrypt11 Package libgcrypt11-1.5.3-1.mga3.i586 is already installed [root@localhost wilcal]# urpmi kgpg Package kgpg-4.10.5-1.1.mga3.i586 is already installed s/b default install of libgcrypt11 & kgpg [root@localhost wilcal]# urpmi libgcrypt11 Package libgcrypt11-1.5.4-5.mga5.i586 is already installed [root@localhost wilcal]# urpmi kgpg Package kgpg-4.14.3-1.mga5.i586 is already installed In VirtualBox, M5, KDE, 64-bit Package(s) under test: lib64gcrypt11 kgpg default install of lib64gcrypt11 & kgpg [root@localhost wilcal]# urpmi lib64gcrypt11 Package lib64gcrypt11-1.5.4-5.mga5.x86_64 is already installed [root@localhost wilcal]# urpmi kgpg Package kgpg-4.14.3-1.mga5.x86_64 is already installed gpg --gen-key ( works, wiggle the mouse, takes about a min ) Real name: wilcal e-mail: somebody@gmail.com Comment: testing passphrase: testing gpg2 --list-keys ( works ) gpg2 -e -r wilcal test.txt ( works, generates test.txt.gpg ) erase test.txt gpg2 test.txt.gpg ( works, regenerates test.txt ) libreoffice --writer exports an encrypted pdf file gpg2 --delete-secret-keys wilcal ( works ) gpg2 --delete-key wilcal ( works ) gpg2 --list-keys ( works, no keys listed ) install lib64gcrypt11 & kgpg from updates_testing [root@localhost wilcal]# urpmi lib64gcrypt11 Package lib64gcrypt11-1.5.4-5.2.mga5.x86_64 is already installed [root@localhost wilcal]# urpmi kgpg Package kgpg-4.14.3-1.mga5.x86_64 is already installed gpg --gen-key ( works, wiggle the mouse, takes about a min ) Real name: wilcal e-mail: somebody@gmail.com Comment: testing passphrase: testing gpg2 --list-keys ( works ) gpg2 -e -r wilcal test.txt ( works, generates test.txt.gpg ) erase test.txt gpg2 test.txt.gpg ( works, regenerates test.txt ) libreoffice --writer exports an encrypted pdf file gpg2 --delete-secret-keys wilcal ( works ) gpg2 --delete-key wilcal ( works ) gpg2 --list-keys ( works, no keys listed ) Look good enough David? Yes This update works fine. Testing complete for MGA5, 32-bit & 64-bit Validating the update. Could someone from the sysadmin team push to updates. Thanks Keywords:
(none) =>
validated_update Advisory uploaded. Whiteboard:
has_procedure MGA5-32-OK MGA5-64-OK =>
has_procedure advisory MGA5-32-OK MGA5-64-OK An update for this issue has been pushed to the Mageia Updates repository. http://advisories.mageia.org/MGASA-2016-0072.html Status:
NEW =>
RESOLVED |