Red Hat Security AdvisoryRHSA-2026:2719
gnupg2 security update
Released 2026-02-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) gnupg2-smime-2.4.5-4.el10_1
- Red Hat Enterprise Linux BaseOS (v. 10) gnupg2-2.4.5-4.el10_1
Fixes 1 record
Priority LOW 39
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00438 · Published 2026-01-27 · Fixed in 2.5.17 CWE-121
