Most recent entries from all

ALSA-2026:2719 — Important: gnupg2 security update

Affected: AlmaLinux:10: gnupg2, AlmaLinux:10: gnupg2-smime

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

* GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution (CVE-2026-24882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-24882

Affected: Alpaquita:23: gnupg, Alpaquita:25: gnupg, Alpaquita:stream: gnupg

certfr-2026-avi-0112 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-0112

EUVD-2026-337459

fkie_cve-2026-24882

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

GHSA-mpc3-hqr8-w5f3

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

OESA-2026-1300 — gnupg2 security update

Affected: openEuler:24.03-LTS: gnupg2

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fix(es):

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.(CVE-2026-24882)

openSUSE-SU-2026:10112-1 — dirmngr-2.5.17-1.1 on GA media

dirmngr-2.5.17-1.1 on GA media

RHSA-2026:2753 — Red Hat Security Advisory: gnupg2 security update

GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution

SUSE-SU-2026:20179-1 — Security update for gpg2

Security update for gpg2

Withdrawn: UBUNTU-CVE-2026-24882

Withdrawn by the publisher.

Affected: Ubuntu:24.04:LTS: gnupg2, Ubuntu:25.10: gnupg2

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

WID-SEC-W-2026-0231 — GnuPG und Gpg4win: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in GnuPG und Gpg4win ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.