Red Hat Security AdvisoryRHSA-2026:1229
gnupg2 security update
Released 2026-01-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.6) gnupg2-smime-2.3.3-4.el9_6.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) gnupg2-2.3.3-4.el9_6.1
Fixes 1 record
Priority HIGH 69
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00152 · Published 2025-12-28 · Partial fix · 2.2.51, 2.4.9 CWE-675