1914 matches found
CVE-2019-6690
Summary It is a simple PoC of Improper Input Validation in python-gnupg 0.4.3 CVE-2019-6690. Vulnerable python python-gnupg 0.4.3 python python-gnupg 0.3.6 python python-gnupg 0.3.5 python python-gnupg 0.3.4 Mitigation Users should upgrade to 0.4.4 Test Environment Docker Image docker pull...
VSHG
VSHG - 硬件抗性与增强的 GnuPG 安全性 VSHG 旨在为 GnuPG 的标准 s2k 密钥派生函数提供内存/硬件抗性强化，并为对称 加密提供简化接口。 关于 VSHG VSHG（非常安全的哈希生成器）是 GnuPG（Gnu 隐私卫士）的独立插件。 它被编写为一个 shell 脚本，并基于 Unix/Linux 文件系统和命令设计。 VSHG 使用 sha384 和 Argon2 哈希函数进行密码处理， 并使用 AES-256-CFB + CAST5-128-CFB 级联进行最终加密。 同时使用标准 sha384 迭代次数 800 次 + Argon2i + d 的 15 次和...
CVE-2019-6690-python-gnupg-vulnerability
CVE-2019-6690：python-gnupg 0.4.3 中的输入验证不当 我们发现在使用对称加密时，可以通过 gnupg.GPG.encrypt 和 gnupg.GPG.decrypt 方法的 passphrase 属性注入数据。 所提供的密码短语未经过换行符验证，库会将 --passphrase-fd=0 传递给 gpg 可执行文件，gpg 期望密码短语位于 标准输入的第一行，而要解密的密文或要加密的 明文则位于后续行。 通过提供包含换行符的密码短语，攻击者可以 控制/修改正在解密/加密的密文/明文。 受影响版本 python-gnupg 0.4.3，可能还包括更早的版本...
USN-8720-1: GnuPG vulnerability
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...
USN-8720-1 gnupg2 vulnerability
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...
PT-2026-85369
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...
Astra Linux – Vulnerability in gnupg2
GnuPG versions up to 2.3.6 allow for signature forgery in unusual situations where an attacker possesses secret-key information from a victim’s keyring, and other constraints such as the use of GPGME are met. This can be achieved by injecting malicious data into the command line’s status line...
Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image
Summary IBM Financial Transaction Manager v4.0.6.0 has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-5914 DESCRIPTION: A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves a...
CVE-2026-24882 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-M6X2-4HHH-669J vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-MPC3-HQR8-W5F3 vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-57062 vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-24882 vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-M6X2-4HHH-669J vulnerabilities
Vulnerabilities for packages: gnupg...
GHSA-MPC3-HQR8-W5F3 vulnerabilities
Vulnerabilities for packages: gnupg...
CVE-2026-57062 vulnerabilities
Vulnerabilities for packages: gnupg...
Photon OS 5.0: Gnupg PHSA-2026-5.0-91-0910
An update of the gnupg package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0910. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CLEANSTART-2026-PV13033 Security fixes in gnupg 2.2.18-r0
Package gnupg version 2.2.18-r0 fixes 1 vulnerabilities: CVE-2019-14855...