Red Hat Security AdvisoryRHSA-2026:2753
gnupg2 security update
Released 2026-02-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) gnupg2-smime-2.4.5-2.el10_0.2
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) gnupg2-2.4.5-2.el10_0.2
Fixes 1 record
Priority LOW 39
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00438 · Published 2026-01-27 · Fixed in 2.5.17 CWE-121
