CVE-2019-6690

Sommario È una semplice PoC di convalida impropria dell'input in python-gnupg 0.4.3 CVE-2019-6690. Versioni vulnerabili python python-gnupg 0.4.3 python python-gnupg 0.3.6 python python-gnupg 0.3.5 python python-gnupg 0.3.4 Mitigazione Gli utenti dovrebbero aggiornare a 0.4.4 Ambiente di test...

VSHG

VSHG - Hardware-Resistenz & verbesserte Sicherheit für GnuPG. VSHG zielt darauf ab, eine speicher-/hardwareresistente Verstärkung für GnuPGs standardmäßige s2k-Schlüsselableitungsfunktion + eine vereinfachte Schnittstelle für symmetrische Verschlüsselung bereitzustellen. Über VSHG VSHG Very secur...

CVE-2019-6690-python-gnupg-vulnerability

CVE-2019-6690: Validazione impropria dell'input in python-gnupg 0.4.3 Abbiamo scoperto un modo per iniettare dati tramite la proprietà passphrase dei metodi gnupg.GPG.encrypt e gnupg.GPG.decrypt quando viene utilizzata la crittografia simmetrica. La passphrase fornita non viene validata per i...

Astra Linux – Vulnerability in gnupg2

GnuPG versions up to 2.3.6 allow for signature forgery in unusual situations where an attacker possesses secret-key information from a victim’s keyring, and other constraints such as the use of GPGME are met. This can be achieved by injecting malicious data into the command line’s status line...

Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image

Summary IBM Financial Transaction Manager v4.0.6.0 has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-5914 DESCRIPTION: A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves a...

CVE-2026-24882 vulnerabilities

Vulnerabilities for packages: gnupg...

GHSA-M6X2-4HHH-669J vulnerabilities

Vulnerabilities for packages: gnupg...

CVE-2026-57062 vulnerabilities

Vulnerabilities for packages: gnupg...

GHSA-MPC3-HQR8-W5F3 vulnerabilities

Vulnerabilities for packages: gnupg...

GHSA-M6X2-4HHH-669J vulnerabilities

Vulnerabilities for packages: gnupg...

CVE-2026-24882 vulnerabilities

Vulnerabilities for packages: gnupg...

GHSA-MPC3-HQR8-W5F3 vulnerabilities

Vulnerabilities for packages: gnupg...

CVE-2026-57062 vulnerabilities

Vulnerabilities for packages: gnupg...

SUSE-SU-2026:22757-1 Security update for gpg2

This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM bsc1269279...

OESA-2026-2858 gnupg2 security update

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 also known as PGP. GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fixes: CMS...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0910

Updates of 'python3', 'gnupg' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-0910

Updates of 'python3', 'gnupg' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-57062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes bu...

CVE-2026-57062

A flaw in GnuPG's gpgsm component improperly handles the Cryptographic Message Syntax CMS format for AES-GCM. By accepting an authentication tag length of 4 bytes instead of the required 12 bytes, this vulnerability allows for a low-impact data integrity issue where the cryptographic validity of...

CVE-2026-57062

CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182...