Summary
USN-7412-1 fixed a vulnerability in GnuPG. This update provides the
corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that GnuPG incorrectly handled importing keys with
certain crafted subkey data. If a user or automated system were tricked
into importing a specially crafted key, a remote attacker may prevent
users from importing other keys in the future.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gnupg2 | 2.1.11-6ubuntu2.1+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gnupg2 | 2.2.4-1ubuntu1.6+esm1 |
References
-
report
https://ubuntu.com/security/CVE-2025-30258