Red Hat Security Advisory

RHSA-2026:82418

Red Hat Hardened Images RPMs Security Update

Released 2026-10-13 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Hardened Images gnupg2-2.4.9-18.3.hum1@aarch64, gnupg2-2.4.9-18.3.hum1@s390x, gnupg2-2.4.9-18.3.hum1@src +31

Fixes 1 record

TI-2026-41062 CVE-2026-57062 · GHSA-m6x2-4hhh-669j

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles…

LOW 13

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted.

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00142 Published 2026-06-23 Partial fix CWE-1284