——————————————————————————–
Fedora Update Notification
FEDORA-2020-9b441d3153
2020-10-19 16:56:49.452670
——————————————————————————–

Name : kleopatra
Product : Fedora 32
Version : 19.12.2
Release : 2.fc32
URL : http://projects.kde.org/?p=kleopatra.git
Summary : KDE certificate manager and unified crypto GUI
Description :
KDE certificate manager and unified crypto GUI.

——————————————————————————–
Update Information:

Security fix for CVE-2020-24972
——————————————————————————–
ChangeLog:

* Mon Oct 12 2020 Than Ngo <than@redhat.com> – 19.12.2-2
– bz#1887364, backported securiy fix, CVE-2020-24972
——————————————————————————–
References:

[ 1 ] Bug #1887363 – CVE-2020-24972 Kleopatra: allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options
https://bugzilla.redhat.com/show_bug.cgi?id=1887363
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2020-9b441d3153’ at the command
line. For more information, refer to the dnf documentation available at
https://protect2.fireeye.com/v1/url?k=d8037b72-8411cf76-d804e6be-000babd90757-e4d83af68078d2b6&q=1&e=a45f1b29-9498-460e-b0ff-94f761367582&u=http%3A%2F%2Fdnf.readthedocs.io%2Fen%2Flatest%2Fcommand_ref.html%23upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org