Security update for GnuPG
GnuPG was updated to fix two memory handling issues with potential security impact:
* CVE-2015-1606: Invalid memory read using a garbled keyring (bsc#918089)
* CVE-2015-1607: memcpy with overlapping ranges (bsc#918090)
-
Submitted by
Vítězslav Čížek (vitezslav_cizek)
Fixed bugs
bnc#918089
VUL-1: CVE-2015-1606: gpg2: Invalid memory read using a garbled keyring
bnc#918090
VUL-1: CVE-2015-1607: gpg2: memcpy with overlapping ranges (keybox_search.c)