Red Hat Security AdvisoryRHSA-2026:1014
gnupg2 security update
Released 2026-01-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) gnupg2-2.2.20-2.el8_4.1, gnupg2-smime-2.2.20-2.el8_4.1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) gnupg2-2.2.20-2.el8_4.1, gnupg2-smime-2.2.20-2.el8_4.1
Fixes 1 record
Priority HIGH 69
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00152 · Published 2025-12-28 · Partial fix · 2.2.51, 2.4.9 CWE-675
