ROOT-OS-UBUNTU-2204-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2025-68973 CVE-2025-68973 in gnupg2 - Patched by Root

Root has patched CVE-2025-68973 in the gnupg2 package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-24882 CVE-2026-24882 in gnupg2 - Patched by Root

Root has patched CVE-2026-24882 in the gnupg2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-30258 CVE-2025-30258 in gnupg2 - Patched by Root

Root has patched CVE-2025-30258 in the gnupg2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-24882 CVE-2026-24882 in gnupg2 - Patched by Root

Root has patched CVE-2026-24882 in the gnupg2 package for Root:Debian:13. Multiple fixed versions available...

AZL-105962 CVE-2026-105712 affecting package gnupg2 2.4.9-3

gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory aka -C into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected...

Rocky Linux 8 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc (crlsa-2026_0728)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260728 advisory. GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write CVE-2025-68973 Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc Multiple Vulnerabilities (crlsa-2020_4490)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204490 advisory. GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS CVE-2019-13050 Tenable h...

AlmaLinux 9.2 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.2:CLSA-2026:1769679566)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1769679566 advisory. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bound...

Rocky Linux 9.6 [CIQ] Security Update: gnupg2 / gnupg2-smime (ciqsa-2026_1415)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261415 advisory. This advisory aggregates security fixes for the gnupg2 SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2025-68973. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc (crlsa-2022_6463)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226463 advisory. gpg: Signature spoofing via status line injection CVE-2022-34903 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

CentOS Linux 8.5 [TuxCare] Security Update: gnupg2 / gnupg2-smime (CENTOS8.5:CLSA-2026:1769163825)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1769163825 advisory. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bound...

Rocky Linux 10.1 [CIQ] Security Update: gnupg2 / gnupg2-debuginfo / gnupg2-debugsource / gnupg2-smime / etc (crlsa-2026_2719)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20262719 advisory. GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution CVE-2026-24882 Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.6:CLSA-2026:1780512159)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780512159 advisory. - GnuPG can be made to spin on a relatively small input by for example crafting a public key with thousands of signatures attached,...

AlmaLinux 9.6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.6:CLSA-2026:1775119189)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775119189 advisory. - In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has...

Rocky Linux 9.6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.6:CLSA-2026:1769085200)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769085200 advisory. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an...

CentOS Linux 6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (CENTOS6:CLSA-2026:1769426059)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1769426059 advisory. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds...

Rocky Linux 9.6 [TuxCare] Security Update: gnupg2 / gnupg2-smime (ALMALINUX9.6:CLSA-2026:1775119189)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775119189 advisory. - In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has...

CentOS Linux 7 [TuxCare] Security Update: gnupg2 / gnupg2-smime (CENTOS7:CLSA-2026:1769433341)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1769433341 advisory. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds...