https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:13:40.768536+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4490 ALSA-2020:4490 — Moderate: gnupg2 security, bug fix, and enhancement update 2026-10-02T20:13:40.776217+00:00

Affected: AlmaLinux:8: gnupg2, AlmaLinux:8: gnupg2-smime

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

The following packages have been upgraded to a later upstream version: gnupg2 (2.2.20). (BZ#1663944)

Security Fix(es):

* GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS (CVE-2019-13050)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-02942 bdu:2019-02942 2026-10-02T20:13:40.776272+00:00 bdu:2019-02942 https://cve.radiocsirt.org/vuln/euvd-2026-55393 EUVD-2026-55393 2026-10-02T20:13:40.776289+00:00 EUVD-2026-55393 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13050 fkie_cve-2019-13050 2026-10-02T20:13:40.776300+00:00

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.

 https://cve.radiocsirt.org/vuln/ghsa-ch5h-mpfr-fhxh GHSA-ch5h-mpfr-fhxh 2026-10-02T20:13:40.776321+00:00

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.

 https://cve.radiocsirt.org/vuln/gsd-2019-13050 gsd-2019-13050 2026-10-02T20:13:40.776335+00:00 gsd-2019-13050 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1917-1 openSUSE-SU-2019:1917-1 — Security update for gpg2 2026-10-02T20:13:40.776345+00:00

Security update for gpg2

 https://cve.radiocsirt.org/vuln/suse-su-2019:2006-1 SUSE-SU-2019:2006-1 — Security update for gpg2 2026-10-02T20:13:40.776360+00:00

Security update for gpg2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13050 UBUNTU-CVE-2019-13050 2026-10-02T20:13:40.776373+00:00

Affected: Ubuntu:Pro:14.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:16.04:LTS: sks, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: sks, Ubuntu:20.04:LTS: sks

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T20:13:40.776397+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.