Skip to content
OpenAdvisories
High DLA-2862-1 2 CVEs

python-gnupg - security update

Published Dec 29, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 python-gnupg 0.3.9-1+deb9u1

Vulnerabilities 2

  • High 7.5
    CVE-2019-6690 Public exploit

    Improper Input Validation python-gnupg

    python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Impr…

    python-gnupg python-gnupg python-gnupg Debian Ubuntu PyPI
  • Unscored —
    CVE-2018-12020

    mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which all…

    gnupg2 gnupg2 gnupg enigmail Debian Ubuntu Alpine