Summary
This update for gpg2 fixes the following issues:
This reverts the CVE-2025-30258 fix, as it changed behaviour when using expired keys.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLE Micro 6.1 Linux Micro 6.1 | gpg2 | 2.4.4-slfo.1.1_4.1 |
Vulnerabilities 1
-
Low 2.7
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid ba…