ROOT-OS-DEBIAN-13-CVE-2026-24882 CVE-2026-24882 in rootio-gnupg2 - Patched by Root

Root has patched CVE-2026-24882 in the rootio-gnupg2 package for Root:Debian:13. Multiple fixed versions available...

RockyLinux 10 : gnupg2 (RLSA-2026:2719)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:2719 advisory. GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution CVE-2026-24882 Tenable has extracted the preceding description block...

RLSA-2026:2719 Important: gnupg2 security update

The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fixes: GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution CVE-2026-24882 For more details about the security...

Amazon Linux 2023 : gnupg2, gnupg2-minimal, gnupg2-smime (ALAS2023-2026-1427)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1427 advisory. In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. CVE-2026-24882 Tenable has extracted the preceding...

Important: gnupg2

Issue Overview: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. CVE-2026-24882 Affected Packages: gnupg2 Issue Correction: Run dnf update gnupg2 --releasever 2023.10.20260216 or dnf update...

Fedora 42 : gnupg2 (2026-59fdfa64f5)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-59fdfa64f5 advisory. Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution Tenable has extracted the preceding description block directly...

AlmaLinux 10 : gnupg2 (ALSA-2026:2719)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:2719 advisory. GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution CVE-2026-24882 Tenable has extracted the preceding description block...

Important: Red Hat Security Advisory: gnupg2 security update

An update for gnupg2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2026:2719 Important: gnupg2 security update

The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. Security Fixes: GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution CVE-2026-24882 For more details about the security...

Oracle Linux 10 : gnupg2 (ELSA-2026-2719)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-2719 advisory. 2.4.5-4 - Fix CVE-2026-24882 tpm2daemon buffer overflow Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RHEL 10 : gnupg2 (RHSA-2026:2753)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2753 advisory. The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards...

SUSE: Security Advisory (SUSE-SU-2026:0434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2026:0434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-24882 affecting package gnupg2 for versions less than 2.4.9-2

CVE-2026-24882 affecting package gnupg2 for versions less than 2.4.9-2. A patched version of the package is available...

Fedora 43 : gnupg2 (2026-d5c00a447f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d5c00a447f advisory. Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution Tenable has extracted the preceding description block directly...

Fedora: Security Advisory (FEDORA-2026-d5c00a447f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROOT-OS-DEBIAN-12-CVE-2026-24882 CVE-2026-24882 in rootio-gnupg2 - Patched by Root

Root has patched CVE-2026-24882 in the rootio-gnupg2 package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-24882

creationtimestamp| type| source ---|---|--- 2026-01-27 19:21:47+00:00| seen| https://seclists.org/oss-sec/2026/q1/127 2026-01-27 19:30:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgiotrfi424 2026-01-27 20:28:00+00:00| seen|...

UBUNTU-CVE-2026-24882

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys...

CVE-2026-24882

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys...