Most recent entries from all

ALSA-2026:0697 — Important: gnupg2 security update

Affected: AlmaLinux:10: gnupg2, AlmaLinux:10: gnupg2-smime

The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.

Security Fix(es):

* GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-16426

BELL-CVE-2025-68973

Affected: Alpaquita:23: gnupg, Alpaquita:25: gnupg, Alpaquita:stream: gnupg

certfr-2026-avi-0112 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-0112

EUVD-2026-308009

fkie_cve-2025-68973

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

GHSA-pj23-86ww-f72p

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.

msrc_CVE-2025-68973 — In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, lead…

msrc_CVE-2025-68973

OESA-2026-1072 — gnupg2 security update

Affected: openEuler:24.03-LTS-SP1: gnupg2, openEuler:24.03-LTS-SP2: gnupg2, openEuler:24.03-LTS-SP3: gnupg2, openEuler:20.03-LTS-SP4: gnupg2, openEuler:22.03-LTS-SP3: gnupg2, openEuler:22.03-LTS-SP4: gnupg2, openEuler:24.03-LTS: gnupg2

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fix(es):

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.(CVE-2025-68973)

openSUSE-SU-2026:10001-1 — dirmngr-2.5.16-1.1 on GA media

dirmngr-2.5.16-1.1 on GA media

RHSA-2026:0935 — Red Hat Security Advisory: gnupg2 security update

GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

SUSE-SU-2026:0378-1 — Security update for gpg2

Security update for gpg2

UBUNTU-CVE-2025-68973

Affected: Ubuntu:Pro:14.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:Pro:18.04:LTS: gnupg2, Ubuntu:Pro:20.04:LTS: gnupg2, Ubuntu:22.04:LTS: gnupg2, Ubuntu:24.04:LTS: gnupg2, Ubuntu:25.10: gnupg2

WID-SEC-W-2025-2928 — GnuPG: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in GnuPG ausnutzen, um Sicherheitsvorkehrungen zu umgehen und weitere, nicht spezifizierte Auswirkungen zu verursachen.