CVE-2026-57062

creationtimestamp| type| source ---|---|--- 2026-07-08 12:00:53+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq5337tlhh23 2026-07-10 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zhjevb2d...

DEBIAN-CVE-2026-57062

CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182...