https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:40:01.458530+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-57062 BELL-CVE-2026-57062 2026-10-04T01:40:01.472624+00:00

Affected: Alpaquita:23: gnupg, Alpaquita:25: gnupg, Alpaquita:stream: gnupg

 https://cve.radiocsirt.org/vuln/euvd-2026-329634 EUVD-2026-329634 2026-10-04T01:40:01.472677+00:00 EUVD-2026-329634 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57062 fkie_cve-2026-57062 2026-10-04T01:40:01.472691+00:00

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

 https://cve.radiocsirt.org/vuln/ghsa-m6x2-4hhh-669j GHSA-m6x2-4hhh-669j 2026-10-04T01:40:01.472715+00:00

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-57062 msrc_CVE-2026-57062 — CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM becau… 2026-10-04T01:40:01.472729+00:00 msrc_CVE-2026-57062 https://cve.radiocsirt.org/vuln/oesa-2026-2858 OESA-2026-2858 — gnupg2 security update 2026-10-04T01:40:01.472746+00:00

Affected: openEuler:24.03-LTS-SP1: gnupg2

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fix(es):

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.(CVE-2026-57062)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11213-1 openSUSE-SU-2026:11213-1 — dirmngr-2.5.21-1.1 on GA media 2026-10-04T01:40:01.472767+00:00

dirmngr-2.5.21-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22757-1 SUSE-SU-2026:22757-1 — Security update for gpg2 2026-10-04T01:40:01.472782+00:00

Security update for gpg2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57062 UBUNTU-CVE-2026-57062 2026-10-04T01:40:01.472794+00:00

Affected: Ubuntu:24.04:LTS: gnupg2, Ubuntu:25.10: gnupg2, Ubuntu:26.04:LTS: gnupg2

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2047 WID-SEC-W-2026-2047 — GnuPG: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T01:40:01.472814+00:00

Ein lokaler Angreifer kann eine Schwachstelle in GnuPG ausnutzen, um Sicherheitsvorkehrungen zu umgehen.