Red Hat Security AdvisoryRHSA-2026:1705
gnupg2 security update
Released 2026-02-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) gnupg2-smime-2.3.3-2.el9_2.1
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) gnupg2-2.3.3-2.el9_2.1
Fixes 1 record
Priority HIGH 69
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00152 · Published 2025-12-28 · Partial fix · 2.2.51, 2.4.9 CWE-675
