Skip to content
OpenAdvisories
Unscored USN-3675-2 1 CVE

gnupg2 vulnerability

Published Jun 15, 2018 · Updated Apr 27, 2026

Summary

USN-3675-1 fixed a vulnerability in GnuPG 2 for Ubuntu 18.04 LTS and
Ubuntu 17.10. This update provides the corresponding update for GnuPG 2
in Ubuntu 16.04 LTS and Ubuntu 14.04 LTS.

Original advisory details:

Marcus Brinkmann discovered that during decryption or verification,
GnuPG did not properly filter out terminal sequences when reporting the
original filename. An attacker could use this to specially craft a file
that would cause an application parsing GnuPG output to incorrectly
interpret the status of the cryptographic operation reported by GnuPG.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS gnupg2 2.0.22-3ubuntu1.4
Ubuntu · 16.04 LTS 16.04:LTS gnupg2 2.1.11-6ubuntu2.1

Vulnerabilities 1

References

  • report
    https://ubuntu.com/security/CVE-2018-12020