https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:30:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11080 bdu:2025-11080 https://cve.radiocsirt.org/vuln/bdu:2025-11080 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/euvd-2026-223811 EUVD-2026-223811 https://cve.radiocsirt.org/vuln/euvd-2026-223811 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30258 <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &#34;verification DoS.&#34;</p> <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &#34;verification DoS.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-30258 https://cve.radiocsirt.org/vuln/ghsa-5rjg-pf4q-hgcr <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &#34;verification DoS.&#34;</p> <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &#34;verification DoS.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-5rjg-pf4q-hgcr https://cve.radiocsirt.org/vuln/msrc_cve-2025-30258 msrc_CVE-2025-30258 https://cve.radiocsirt.org/vuln/msrc_cve-2025-30258 https://cve.radiocsirt.org/vuln/oesa-2025-1375 <p><strong>Affected:</strong> openEuler:24.03-LTS: gnupg2</p> <p>GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fix(es):</p> <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &amp;quot;verification DoS.&amp;quot;(CVE-2025-30258)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: gnupg2</p> <p>GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fix(es):</p> <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &amp;quot;verification DoS.&amp;quot;(CVE-2025-30258)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1375 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15076-1 <p>dirmngr-2.5.6-1.1 on GA media</p> <p>dirmngr-2.5.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15076-1 https://cve.radiocsirt.org/vuln/suse-ru-2025:20460-1 <p>Recommended update for gpg2</p> <p>Recommended update for gpg2</p> https://cve.radiocsirt.org/vuln/suse-ru-2025:20460-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-30258 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:Pro:18.04:LTS: gnupg2, Ubuntu:20.04:LTS: gnupg2, Ubuntu:22.04:LTS: gnupg2, Ubuntu:24.04:LTS: gnupg2, Ubuntu:25.10: gnupg2</p> <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &#34;verification DoS.&#34;</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:Pro:18.04:LTS: gnupg2, Ubuntu:20.04:LTS: gnupg2, Ubuntu:22.04:LTS: gnupg2, Ubuntu:24.04:LTS: gnupg2, Ubuntu:25.10: gnupg2</p> <p>In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a &#34;verification DoS.&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-30258 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0600 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GnuPG ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GnuPG ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0600