https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:06:16 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-57062 <p><strong>Affected:</strong> Alpaquita:23: gnupg, Alpaquita:25: gnupg, Alpaquita:stream: gnupg</p> <p><strong>Affected:</strong> Alpaquita:23: gnupg, Alpaquita:25: gnupg, Alpaquita:stream: gnupg</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-57062 https://cve.radiocsirt.org/vuln/euvd-2026-329634 EUVD-2026-329634 https://cve.radiocsirt.org/vuln/euvd-2026-329634 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57062 <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.</p> <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-57062 https://cve.radiocsirt.org/vuln/ghsa-m6x2-4hhh-669j <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.</p> <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.</p> https://cve.radiocsirt.org/vuln/ghsa-m6x2-4hhh-669j https://cve.radiocsirt.org/vuln/msrc_cve-2026-57062 msrc_CVE-2026-57062 https://cve.radiocsirt.org/vuln/msrc_cve-2026-57062 https://cve.radiocsirt.org/vuln/oesa-2026-2858 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: gnupg2</p> <p>GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fix(es):</p> <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.(CVE-2026-57062)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: gnupg2</p> <p>GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fix(es):</p> <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.(CVE-2026-57062)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2858 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11213-1 <p>dirmngr-2.5.21-1.1 on GA media</p> <p>dirmngr-2.5.21-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11213-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22757-1 <p>Security update for gpg2</p> <p>Security update for gpg2</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22757-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57062 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: gnupg2, Ubuntu:25.10: gnupg2, Ubuntu:26.04:LTS: gnupg2</p> <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: gnupg2, Ubuntu:25.10: gnupg2, Ubuntu:26.04:LTS: gnupg2</p> <p>CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57062 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2047 <p>Ein lokaler Angreifer kann eine Schwachstelle in GnuPG ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in GnuPG ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2047