gnupg2

4 results · Clear filters · Feed

• Low 3.6
  CVE-2026-105712

  gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted arc…

  gnupg GnuPG gnupg2 gnupg2 Debian Ubuntu Azure Linux
  Oct 5, 2026
• Low 2.9
  CVE-2026-57062 Public exploit

  CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM becau…

  gnupg GnuPG gnupg2 gnupg2 Debian Ubuntu Azure Linux Wolfi
  Jun 23, 2026
• Low 2.7
  CVE-2025-30258

  In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid ba…

  gnupg GnuPG gnupg2 gnupg2 Debian Ubuntu Azure Linux Wolfi
  Mar 19, 2025
• Low 3.3
  CVE-2022-3219

  GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatur…

  gnupg2 gnupg2 gnupg Debian Ubuntu
  Feb 23, 2023