OPENSUSE-SU-2026:21385-1 Security update for gpg2

This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM bsc1269279...

CVE-2026-57062

creationtimestamp| type| source ---|---|--- 2026-07-08 12:00:53+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq5337tlhh23 2026-07-10 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zhjevb2d 2026-09-05 07:00:05+00:00|...

BELL-CVE-2026-57062

Bulletin has no description...

DEBIAN-CVE-2026-57062

CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182...