rpm package
suse/gpg2&distro=SUSE Linux Enterprise Server for SAP applications 16.0
pkg:rpm/suse/gpg2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-24883 | — | < 2.5.5-160000.4.1 | 2.5.5-160000.4.1 | Jan 27, 2026 | In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash). | ||
| CVE-2026-24882 | — | < 2.5.5-160000.4.1 | 2.5.5-160000.4.1 | Jan 27, 2026 | In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. | ||
| CVE-2025-68973 | — | < 2.5.5-160000.3.1 | 2.5.5-160000.3.1 | Dec 28, 2025 | In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.) |
- CVE-2026-24883Jan 27, 2026affected < 2.5.5-160000.4.1fixed 2.5.5-160000.4.1
In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).
- CVE-2026-24882Jan 27, 2026affected < 2.5.5-160000.4.1fixed 2.5.5-160000.4.1
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
- CVE-2025-68973Dec 28, 2025affected < 2.5.5-160000.3.1fixed 2.5.5-160000.3.1
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)