Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gnupg2-debuginfo | 0:2.3.3-5.el9_7 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gnupg2-debugsource | 0:2.3.3-5.el9_7 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gnupg2-smime | 0:2.3.3-5.el9_7 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gnupg2-smime-debuginfo | 0:2.3.3-5.el9_7 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | gnupg2 | 0:2.3.3-5.el9_7 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | gnupg2-debuginfo | 0:2.3.3-5.el9_7 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | gnupg2-debugsource | 0:2.3.3-5.el9_7 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | gnupg2-smime-debuginfo | 0:2.3.3-5.el9_7 |
Vulnerabilities 1
-
High 7.8
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leadi…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2425966
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0719.json
-
report
https://access.redhat.com/security/cve/CVE-2025-68973
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-68973
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-68973
-
article
https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306
-
article
https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9
-
article
https://gpg.fail/memcpy
-
article
https://news.ycombinator.com/item?id=46403200
-
article
https://www.openwall.com/lists/oss-security/2025/12/28/5