CVE-2006-0455
Fixed in a distro release EPSS 1%
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".
Products: gnu privacy_guard
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | gnupg | 1.0.6-4woody4 |
| Debian 3.1 | gnupg | 1.4.1-1sarge1 |
| Red Hat Enterprise Linux 3 | gnupg | 0:1.2.1-15 |
| Red Hat Enterprise Linux 3 | gnupg-debuginfo | 0:1.2.1-15 |
| Red Hat Enterprise Linux 4 | gnupg | 0:1.2.6-3 |
| Red Hat Enterprise Linux 4 | gnupg-debuginfo | 0:1.2.6-3 |
| openSUSE Tumbleweed | gpg2 | 2.2.27-2.4 |