TITLE:
SUSE update for gpg / liby2util

SECUNIA ADVISORY ID:
SA18968

VERIFY ADVISORY:
http://secunia.com/advisories/18968/

CRITICAL:
Less critical

IMPACT:
Security Bypass

WHERE:
>From remote

OPERATING SYSTEM:
SUSE Linux 9.3
http://secunia.com/product/4933/
SUSE Linux 10
http://secunia.com/product/6221/

DESCRIPTION:
SUSE has issued an update for gpg / liby2util. This fixes a security
issue, which potentially can be exploited by malicious people to
bypass certain security restrictions.

For more information:
SA18845

SOLUTION:
Apply updated packages.

-- x86 Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gpg-1.4.2-5.2.i586.rpm
f1422c0264ff3e270a56d03d4b47e762
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/liby2util-2.12.9-0.3.i586.rpm
9a6f3ee339303f3efd92121dedf441aa
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/liby2util-devel-2.12.9-0.3.i586.rpm
b504c0cf0f84039018ae1ac90d2e5292

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gpg-1.4.0-4.2.i586.rpm
fffa34f3034effa188cbeb942473e200
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/liby2util-2.11.7-0.3.i586.rpm
a321ab146d07c50cc69a91352ac28bf7
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/liby2util-devel-2.11.7-0.3.i586.rpm
1215bcf8f061079dbe05b93b1d611818

-- Power PC Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/liby2util-2.12.9-0.3.ppc.rpm
287ef59b3aec2b9aaaba0e17a9cbba27
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/liby2util-devel-2.12.9-0.3.ppc.rpm
f0bd4524c50c5e0a5613f70393ba4489

-- x86-64 Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/liby2util-2.12.9-0.3.x86_64.rpm
edcad55c6587b9322b5895f2e1ff3760
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/liby2util-devel-2.12.9-0.3.x86_64.rpm
c6b4a827e8ab4dc6d14608ceeb3e3385

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/liby2util-2.11.7-0.3.x86_64.rpm
7cd1425a429b4637b34aa675d4eeaa85
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/liby2util-devel-2.11.7-0.3.x86_64.rpm
8d27157261b70a5bb51ab643d8dd1fe8

-- Sources --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/gpg-1.4.2-5.2.src.rpm
5098f06cba2e38aa0b5181fb3f9cd7f3
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/liby2util-2.12.9-0.3.src.rpm
3107fb78311f00f01c484c1fa1ab26df

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/gpg-1.4.0-4.2.src.rpm
026b7d74d345815de958152305ffde09
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/liby2util-2.11.7-0.3.src.rpm
2663aecb5e77147aca6881bd92e570bb

ORIGINAL ADVISORY:
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0005.html

OTHER REFERENCES:
SA18845:
http://secunia.com/advisories/18845/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------