rpm package
suse/gpg2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7
pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-24882 | Hig | 8.4 | < 2.4.4-150600.3.15.1 | 2.4.4-150600.3.15.1 | Jan 27, 2026 | In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. | |
| CVE-2025-68973 | Hig | 7.8 | < 2.4.4-150600.3.12.1 | 2.4.4-150600.3.12.1 | Dec 28, 2025 | In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.) | |
| CVE-2025-30258 | Low | 2.7 | < 2.4.4-150600.3.9.1 | 2.4.4-150600.3.9.1 | Mar 19, 2025 | In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS." |
- affected < 2.4.4-150600.3.15.1fixed 2.4.4-150600.3.15.1
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
- affected < 2.4.4-150600.3.12.1fixed 2.4.4-150600.3.12.1
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
- affected < 2.4.4-150600.3.9.1fixed 2.4.4-150600.3.9.1
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."