Red Hat Security AdvisoryRHSA-2026:1677
gnupg2 security update
Released 2026-02-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) gnupg2-2.0.22-5.el7_9.1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) gnupg2-smime-2.0.22-5.el7_9.1
Fixes 1 record
Priority HIGH 69
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00152 · Published 2025-12-28 · Partial fix · 2.2.51, 2.4.9 CWE-675
