SUSE-SU-2026:0694-1
Security update for gpg2
No scoreFix available
SUSE-SU-2026:0694-1 is a vulnerability with no CVSS score yet in gpg2, published February 27, 2026. No source lists public exploit code. Fixed in gpg2 2.2.27-150300.3.19.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.2.27-150300.3.19.1gpg2 +3 more
Description
This update for gpg2 fixes the following issues:
Security fix:
- Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data (bsc#1256389)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gpg2SUSE:Linux Enterprise Micro 5.3 | before 2.2.27-150300.3.19.1 | 2.2.27-150300.3.19.1 |
gpg2SUSE:Linux Enterprise Micro 5.4 | before 2.2.27-150300.3.19.1 | 2.2.27-150300.3.19.1 |
gpg2SUSE:Linux Enterprise Micro 5.5 | before 2.2.27-150300.3.19.1 | 2.2.27-150300.3.19.1 |
gpg2SUSE:Linux Enterprise Micro 5.2 | before 2.2.27-150300.3.19.1 | 2.2.27-150300.3.19.1 |
What each source reports
OSVNo score
Security update for gpg2
This update for gpg2 fixes the following issues:
Security fix:
- Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data (bsc#1256389)
- Record
SUSE-SU-2026:0694-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.