Advisories » MGASA-2014-0498

Updated libksba packages fix security vulnerability

Publication date: 26 Nov 2014
Modification date: 26 Nov 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-9087

Description

By using special crafted S/MIME messages or ECC based OpenPGP data, it is
possible to create a buffer overflow, which could lead to a denial of service
(CVE-2014-9087).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14663
• http://lists.gnupg.org/pipermail/gnupg-announce/2014q4/000359.html
• http://openwall.com/lists/oss-security/2014/11/26/3
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9087

SRPMS

3/core

• libksba-1.3.2-1.mga3

4/core

• libksba-1.3.2-1.mga4