Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gnupg2: gnupg2-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-dirmngr-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-g13-2.4.9-18.3.hum1 aarch64, s390x, x8664 gnupg2-gpg-agent-2.4.9-18.3.hum1 aarch64...

EulerOS 2.0 SP13 : gnupg2 (EulerOS-SA-2026-4141)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

EulerOS 2.0 SP13 : gnupg2 (EulerOS-SA-2026-4050)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

EulerOS 2.0 SP11 : gnupg2 (EulerOS-SA-2026-4231)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

Rocky Linux 9.2 [CIQ] Security Update: gnupg2 / gnupg2-smime Multiple Vulnerabilities (ciqsa-2026_1624)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261624 advisory. This advisory aggregates security fixes for the gnupg2 SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2022-34903, CVE-2014-4617, CVE-2006-6169,...

EulerOS 2.0 SP15 : gnupg2 (EulerOS-SA-2026-3977)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

EulerOS 2.0 SP15 : gnupg2 (EulerOS-SA-2026-3911)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

ROOT-OS-UBUNTU-2204-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2025-68973 CVE-2025-68973 in gnupg2 - Patched by Root

Root has patched CVE-2025-68973 in the gnupg2 package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-24882 CVE-2026-24882 in gnupg2 - Patched by Root

Root has patched CVE-2026-24882 in the gnupg2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-30258 CVE-2025-30258 in gnupg2 - Patched by Root

Root has patched CVE-2025-30258 in the gnupg2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-30258 CVE-2025-30258 in gnupg2 - Patched by Root

Root has patched CVE-2025-30258 in the gnupg2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Debian:11. Multiple fixed versions available...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gnupg2: gnupg2-2.4.9-18.1.hum1 aarch64, x8664 gnupg2-dirmngr-2.4.9-18.1.hum1 aarch64, x8664 gnupg2-g13-2.4.9-18.1.hum1 aarch64, x8664 gnupg2-gpg-agent-2.4.9-18.1.hum1 aarch64, x8664...

ROOT-OS-DEBIAN-13-CVE-2026-24882 CVE-2026-24882 in gnupg2 - Patched by Root

Root has patched CVE-2026-24882 in the gnupg2 package for Root:Debian:13. Multiple fixed versions available...

AZL-105962 CVE-2026-105712 affecting package gnupg2 2.4.9-3

gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory aka -C into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected...

AlmaLinux 9.2 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.2:CLSA-2026:1769679566)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1769679566 advisory. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bound...

Rocky Linux 8 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc (crlsa-2022_6463)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226463 advisory. gpg: Signature spoofing via status line injection CVE-2022-34903 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

CentOS Linux 8.5 [TuxCare] Security Update: gnupg2 / gnupg2-smime (CENTOS8.5:CLSA-2026:1769163825)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1769163825 advisory. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bound...

Rocky Linux 8 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc (crlsa-2026_0728)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260728 advisory. GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write CVE-2025-68973 Tenable has extracted the preceding description...