Skip to content
OpenAdvisories
Unscored USN-7412-2 0 CVEs

gnupg2 regression

Published Jul 8, 2025 · Updated Feb 10, 2026

Summary

USN-7412-1 fixed vulnerabilities in GnuPG. The update introduced a
regression. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that GnuPG incorrectly handled importing keys with
certain crafted subkey data. If a user or automated system were tricked
into importing a specially crafted key, a remote attacker may prevent
users from importing other keys in the future.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS gnupg2 2.2.27-3ubuntu2.4
Ubuntu · 24.04 LTS 24.04:LTS gnupg2 2.4.4-2ubuntu17.3

References

  • report
    https://launchpad.net/bugs/2114775