{"id":"CVE-2025-68973","aliases":["ALPINE-CVE-2025-68973","ALSA-2026:0697","ALSA-2026:0719","ALSA-2026:0728","AZL-73204","AZL-73367","BELL-CVE-2025-68973","CLSA-2026-1768989383","CLSA-2026-1769015071","CLSA-2026-1769018042","CLSA-2026-1769085200","CLSA-2026-1769162862","CLSA-2026-1769163161","CLSA-2026-1769163825","CLSA-2026-1769171615","CLSA-2026-1769182340","CLSA-2026-1769182554","CLSA-2026-1769426059","CLSA-2026-1769433341","CLSA-2026-1769524269","CLSA-2026-1769679566","CLSA-2026-1770982328","CLSA-2026-1786038406","DEBIAN-CVE-2025-68973","DLA-4437-1","EUVD-2025-205519","GHSA-pj23-86ww-f72p","JLSEC-2026-563","MGASA-2026-0197","OESA-2026-1072","RHSA-2026:0697","RHSA-2026:0719","RHSA-2026:0728","RHSA-2026:0935","RHSA-2026:0974","RHSA-2026:1014","RHSA-2026:1229","RHSA-2026:1230","RHSA-2026:1468","RHSA-2026:1629","RHSA-2026:1677","RHSA-2026:1705","RHSA-2026:1719","RLSA-2026:0697","RLSA-2026:0719","RLSA-2026:0728","ROOT-OS-ALPINE-319-CVE-2025-68973","ROOT-OS-DEBIAN-11-CVE-2025-68973","ROOT-OS-DEBIAN-12-CVE-2025-68973","ROOT-OS-DEBIAN-13-CVE-2025-68973","ROOT-OS-UBUNTU-2004-CVE-2025-68973","ROOT-OS-UBUNTU-2204-CVE-2025-68973","SUSE-SU-2026:0214-1","SUSE-SU-2026:0215-1","SUSE-SU-2026:0378-1","SUSE-SU-2026:20080-1","SUSE-SU-2026:20108-1","SUSE-SU-2026:20243-1","SUSE-SU-2026:20356-1","UBUNTU-CVE-2025-68973","USN-7946-1","USN-7946-2","openSUSE-SU-2026:10001-1","openSUSE-SU-2026:20029-1"],"status":"published","title":"In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where...","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00152,"percentile":0.04367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-675","CWE-787"],"published":"2025-12-28T16:19:11Z","modified":"2026-10-29T11:58:15Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"gnupg","fixed_in":["2.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gnupg","fixed_in":["2.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gnupg","fixed_in":["2.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gnupg","fixed_in":["2.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gnupg","fixed_in":["2.4.9-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"gnupg2","fixed_in":["2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"gnupg2-smime","fixed_in":["2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gnupg2","fixed_in":["2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"gnupg2-smime","fixed_in":["2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnupg2","fixed_in":["2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnupg2-smime","fixed_in":["2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"gnupg2","fixed_in":["2.4.9-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gnupg2","fixed_in":["2.4.0-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gnupg","fixed_in":["2.2.40-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"gnupg","fixed_in":["2.4.9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gnupg","fixed_in":["2.4.9-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"dirmngr","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg-agent","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg-l10n","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg-utils","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg2","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg-agent","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg-wks-client","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg-wks-server","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgconf","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgsm","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv-static","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv-win32","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv2","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"scdaemon","fixed_in":["2.2.19-3ubuntu2.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"dirmngr","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg-agent","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg-l10n","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg-utils","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg2","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg-agent","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg-wks-client","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg-wks-server","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgconf","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgsm","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv-static","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv-win32","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv2","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"scdaemon","fixed_in":["2.2.4-1ubuntu1.6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"dirmngr","fixed_in":["2.1.11-6ubuntu2.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg-agent","fixed_in":["2.1.11-6ubuntu2.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg2","fixed_in":["2.1.11-6ubuntu2.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gpgsm","fixed_in":["2.1.11-6ubuntu2.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gpgv2","fixed_in":["2.1.11-6ubuntu2.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"scdaemon","fixed_in":["2.1.11-6ubuntu2.1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnupg2","fixed_in":["2.3.3-4.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnupg2-smime","fixed_in":["2.3.3-4.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gnupg2","fixed_in":["2.2.20-3.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"gnupg2-smime","fixed_in":["2.2.20-3.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnupg2","fixed_in":["2.2.20-3.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnupg2-smime","fixed_in":["2.2.20-3.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnupg2","fixed_in":["2.2.20-3.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnupg2-smime","fixed_in":["2.2.20-3.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"gnupg2","fixed_in":["2.0.14-9.el6_10.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"gnupg2-smime","fixed_in":["2.0.14-9.el6_10.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnupg2","fixed_in":["2.0.22-5.el7_5.tuxcare.els1","2.0.22-5.0.1.el7_5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"gnupg2-smime","fixed_in":["2.0.22-5.el7_5.tuxcare.els1","2.0.22-5.0.1.el7_5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnupg2","fixed_in":["2.0.22-5.el7_5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"gnupg2-smime","fixed_in":["2.0.22-5.el7_5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"gnupg2","fixed_in":["2.0.14-9.el6_10.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"gnupg2-smime","fixed_in":["2.0.14-9.el6_10.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnupg2","fixed_in":["2.0.22-5.el7_5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"gnupg2-smime","fixed_in":["2.0.22-5.el7_5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"dirmngr","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gnupg","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gnupg-agent","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gnupg-l10n","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gnupg-utils","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gnupg2","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpg","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpg-agent","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpg-wks-client","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpg-wks-server","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpgconf","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpgsm","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpgv","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpgv-static","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpgv-win32","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"gpgv2","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"scdaemon","fixed_in":["2.2.12-1+deb10u2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnupg2","fixed_in":["2.3.3-2.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnupg2-smime","fixed_in":["2.3.3-2.el9_0.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg","fixed_in":["1.4.20-1ubuntu3.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg-curl","fixed_in":["1.4.20-1ubuntu3.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gpgv","fixed_in":["1.4.20-1ubuntu3.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnupg2","fixed_in":["2.2.40-1.1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnupg2","fixed_in":["2.4.7-21+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnupg2","fixed_in":["2.4.8-5"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"gnupg2","fixed_in":["2.2.27-2+deb11u3"],"sources":["osv"]},{"ecosystem":"Julia","package":"GnuPG_jll","fixed_in":["2.5.16+0"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"gnupg2","fixed_in":["2.4.3-13.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"gnupg2","fixed_in":["2.4.3-13.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"gnupg2","fixed_in":["2.4.3-13.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"gnupg2","fixed_in":["2.2.21-10.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"gnupg2","fixed_in":["2.2.32-9.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"gnupg2","fixed_in":["2.2.32-9.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"gnupg2","fixed_in":["2.4.3-10.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-debuginfo","fixed_in":["0:2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-debugsource","fixed_in":["0:2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-smime","fixed_in":["0:2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2","fixed_in":["0:2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-debuginfo","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-debugsource","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-smime","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2-debuginfo","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2-debugsource","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2","fixed_in":["0:2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-debuginfo","fixed_in":["0:2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-debugsource","fixed_in":["0:2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnupg2","fixed_in":["0:2.2.20-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnupg2","fixed_in":["0:2.2.20-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnupg2","fixed_in":["0:2.2.20-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"gnupg2","fixed_in":["0:2.2.20-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"gnupg2","fixed_in":["0:2.2.20-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnupg2","fixed_in":["0:2.2.20-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnupg2","fixed_in":["0:2.2.20-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.20-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnupg2-smime","fixed_in":["0:2.3.3-4.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnupg2","fixed_in":["0:2.3.3-4.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gnupg2-smime","fixed_in":["0:2.3.3-4.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"gnupg2","fixed_in":["0:2.3.3-4.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"gnupg2","fixed_in":["0:2.2.9-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"gnupg2-smime","fixed_in":["0:2.2.9-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-debuginfo","fixed_in":["0:2.4.5-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-debugsource","fixed_in":["0:2.4.5-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-smime","fixed_in":["0:2.4.5-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.4.5-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2","fixed_in":["0:2.4.5-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"gnupg2","fixed_in":["0:2.0.22-5.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"gnupg2-debuginfo","fixed_in":["0:2.0.22-5.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"gnupg2-smime","fixed_in":["0:2.0.22-5.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-debuginfo","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-debugsource","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-smime","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2-debuginfo","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2-debugsource","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.3.3-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-debuginfo","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-debugsource","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-smime","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2-debuginfo","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2-debugsource","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2-smime-debuginfo","fixed_in":["0:2.3.3-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"gnupg2","fixed_in":["0:2.4.5-3.el10_1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"gnupg2","fixed_in":["0:2.3.3-5.el9_7"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"gnupg2","fixed_in":["0:2.2.20-4.el8_10"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"gnupg","fixed_in":["2.4.4-r00071","2.4.4-r00072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-gnupg","fixed_in":["2.4.4-r00071","2.4.4-r00072"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:20.04","package":"gnupg2","fixed_in":["2.2.19-3ubuntu2.5.aikido.1","2.2.19-3ubuntu2.5.aikido.2","2.2.19-3ubuntu2.5.aikido.3"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:20.04","package":"rootio-gnupg2","fixed_in":["2.2.19-3ubuntu2.5.aikido.1","2.2.19-3ubuntu2.5.aikido.2","2.2.19-3ubuntu2.5.aikido.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gpg2","fixed_in":["2.2.27-150300.3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"gpg2","fixed_in":["2.4.4-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"gpg2","fixed_in":["2.4.4-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"gpg2","fixed_in":["2.4.4-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"gpg2","fixed_in":["2.4.4-150600.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gpg2","fixed_in":["2.0.24-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gpg2","fixed_in":["2.0.24-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"gpg2","fixed_in":["2.5.5-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"gpg2","fixed_in":["2.5.5-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"gpg2","fixed_in":["2.5.5-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"gpg2","fixed_in":["2.4.4-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"gpg2","fixed_in":["2.4.4-slfo.1.1_6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnupg","fixed_in":["1.4.16-1ubuntu2.6+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnupg","fixed_in":["1.4.20-1ubuntu3.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnupg2","fixed_in":["2.1.11-6ubuntu2.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnupg2","fixed_in":["2.2.4-1ubuntu1.6+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnupg2","fixed_in":["2.2.19-3ubuntu2.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gnupg2","fixed_in":["2.2.27-3ubuntu2.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gnupg2","fixed_in":["2.4.4-2ubuntu17.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gnupg2","fixed_in":["2.4.8-2ubuntu2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gpg2","fixed_in":["2.5.16-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"gpg2","fixed_in":["2.5.5-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.40-r0"},{"fixed":"2.2.40-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.7-r0"},{"fixed":"2.4.9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0-r1"},{"fixed":"2.4.9-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"dirmngr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg-wks-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpg-wks-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv-win32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"gpgv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"scdaemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"dirmngr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg-wks-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpg-wks-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv-win32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"gpgv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"scdaemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dirmngr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gpgsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gpgv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"scdaemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-4.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-4.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.20-3.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-9.el6_10.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-9.el6_10.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-9.el6_10.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-9.el6_10.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"dirmngr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gnupg-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gnupg-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gnupg-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpg-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpg-wks-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpg-wks-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpgconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpgsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpgv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpgv-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpgv-win32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"gpgv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"scdaemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-1+deb10u2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-2.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-2.el9_0.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.20-1ubuntu3.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gnupg-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.20-1ubuntu3.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gpgv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.20-1ubuntu3.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.0.1.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-5.0.1.el7_5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.40-1.1+deb12u2"}]}],"versions":["2.2.40-1.1","2.2.40-1.1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-21+deb13u1"}]}],"versions":["2.4.7-21"]},{"source":"osv","ecosystem":"Debian:14","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-5"}]}],"versions":["2.4.7-21","2.4.8-1","2.4.8-2","2.4.8-3","2.4.8-4"]},{"source":"osv","ecosystem":"Debian:11","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-2+deb11u3"}]}],"versions":["2.2.27-2","2.2.27-2+deb11u1","2.2.27-2+deb11u2"]},{"source":"osv","ecosystem":"Julia","package":"GnuPG_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.16+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-1.5.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-13.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-13.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-13.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.21-10.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-9.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.32-9.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-10.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-4.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-4.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-4.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-4.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.9-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.22-5.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.22-5.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.22-5.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-smime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"gnupg2-smime-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-3.el10_1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-5.el9_7"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-4.el8_10"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-r00071"},{"fixed":"2.4.4-r00072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-r00071"},{"fixed":"2.4.4-r00072"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:20.04","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5.aikido.1"},{"fixed":"2.2.19-3ubuntu2.5.aikido.2"},{"fixed":"2.2.19-3ubuntu2.5.aikido.3"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:20.04","package":"rootio-gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5.aikido.1"},{"fixed":"2.2.19-3ubuntu2.5.aikido.2"},{"fixed":"2.2.19-3ubuntu2.5.aikido.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-150300.3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150600.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.24-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.24-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-slfo.1.1_6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1ubuntu2.6+esm2"}]}],"versions":["1.4.14-1ubuntu2","1.4.15-1.1ubuntu1","1.4.15-1.1ubuntu2","1.4.15-2ubuntu1","1.4.16-1ubuntu1","1.4.16-1ubuntu2","1.4.16-1ubuntu2.1","1.4.16-1ubuntu2.3","1.4.16-1ubuntu2.4","1.4.16-1ubuntu2.5","1.4.16-1ubuntu2.6","1.4.16-1ubuntu2.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.20-1ubuntu3.3+esm3"}]}],"versions":["1.4.18-7ubuntu1","1.4.19-6ubuntu1","1.4.20-1ubuntu1","1.4.20-1ubuntu2","1.4.20-1ubuntu3","1.4.20-1ubuntu3.1","1.4.20-1ubuntu3.2","1.4.20-1ubuntu3.3","1.4.20-1ubuntu3.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+esm3"}]}],"versions":["2.0.28-3ubuntu1","2.0.28-3ubuntu2","2.1.11-6ubuntu1","2.1.11-6ubuntu2","2.1.11-6ubuntu2.1","2.1.11-6ubuntu2.1+esm1","2.1.11-6ubuntu2.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+esm2"}]}],"versions":["2.1.15-1ubuntu8","2.2.4-1ubuntu1","2.2.4-1ubuntu1.1","2.2.4-1ubuntu1.2","2.2.4-1ubuntu1.3","2.2.4-1ubuntu1.4","2.2.4-1ubuntu1.5","2.2.4-1ubuntu1.6","2.2.4-1ubuntu1.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+esm1"}]}],"versions":["2.2.12-1ubuntu3","2.2.17-3ubuntu1","2.2.19-3ubuntu2","2.2.19-3ubuntu2.1","2.2.19-3ubuntu2.2","2.2.19-3ubuntu2.4","2.2.19-3ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-3ubuntu2.5"}]}],"versions":["2.2.20-1ubuntu4","2.2.27-2ubuntu1","2.2.27-3ubuntu1","2.2.27-3ubuntu2","2.2.27-3ubuntu2.1","2.2.27-3ubuntu2.3","2.2.27-3ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-2ubuntu17.4"}]}],"versions":["2.2.40-1.1ubuntu1","2.4.4-2ubuntu7","2.4.4-2ubuntu15","2.4.4-2ubuntu16","2.4.4-2ubuntu17","2.4.4-2ubuntu17.2","2.4.4-2ubuntu17.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-2ubuntu2.1"}]}],"versions":["2.4.4-2ubuntu23","2.4.4-2ubuntu24","2.4.7-17ubuntu3","2.4.8-2ubuntu1","2.4.8-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.11-6ubuntu2.1+esm3"}]}],"versions":["2.0.28-3ubuntu1","2.0.28-3ubuntu2","2.1.11-6ubuntu1","2.1.11-6ubuntu2","2.1.11-6ubuntu2.1","2.1.11-6ubuntu2.1+esm1","2.1.11-6ubuntu2.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1ubuntu1.6+esm2"}]}],"versions":["2.1.15-1ubuntu8","2.2.4-1ubuntu1","2.2.4-1ubuntu1.1","2.2.4-1ubuntu1.2","2.2.4-1ubuntu1.3","2.2.4-1ubuntu1.4","2.2.4-1ubuntu1.5","2.2.4-1ubuntu1.6","2.2.4-1ubuntu1.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.19-3ubuntu2.5+esm1"}]}],"versions":["2.2.12-1ubuntu3","2.2.17-3ubuntu1","2.2.19-3ubuntu2","2.2.19-3ubuntu2.1","2.2.19-3ubuntu2.2","2.2.19-3ubuntu2.4","2.2.19-3ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.27-3ubuntu2.5"}]}],"versions":["2.2.20-1ubuntu4","2.2.27-2ubuntu1","2.2.27-3ubuntu1","2.2.27-3ubuntu2","2.2.27-3ubuntu2.1","2.2.27-3ubuntu2.3","2.2.27-3ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-2ubuntu17.4"}]}],"versions":["2.2.40-1.1ubuntu1","2.4.4-2ubuntu7","2.4.4-2ubuntu15","2.4.4-2ubuntu16","2.4.4-2ubuntu17","2.4.4-2ubuntu17.2","2.4.4-2ubuntu17.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-2ubuntu2.1"}]}],"versions":["2.4.4-2ubuntu23","2.4.4-2ubuntu24","2.4.7-17ubuntu3","2.4.8-2ubuntu1","2.4.8-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1ubuntu2.6+esm2"}]}],"versions":["1.4.14-1ubuntu2","1.4.15-1.1ubuntu1","1.4.15-1.1ubuntu2","1.4.15-2ubuntu1","1.4.16-1ubuntu1","1.4.16-1ubuntu2","1.4.16-1ubuntu2.1","1.4.16-1ubuntu2.3","1.4.16-1ubuntu2.4","1.4.16-1ubuntu2.5","1.4.16-1ubuntu2.6","1.4.16-1ubuntu2.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.20-1ubuntu3.3+esm3"}]}],"versions":["1.4.18-7ubuntu1","1.4.19-6ubuntu1","1.4.20-1ubuntu1","1.4.20-1ubuntu2","1.4.20-1ubuntu3","1.4.20-1ubuntu3.1","1.4.20-1ubuntu3.2","1.4.20-1ubuntu3.3","1.4.20-1ubuntu3.3+esm2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.16-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gpg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-160000.3.1"}]}]}],"products":[{"vendor":"gnupg","product":"gnupg"}],"references":[{"url":"https://gpg.fail/memcpy","tags":["exploit","Broken Link","web","article","report"]},{"url":"https://news.ycombinator.com/item?id=46403200","tags":["Issue Tracking","web","article","report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/12/28/5","tags":["Mailing List","web","article","report"]},{"url":"https://github.com/gpg/gnupg/commit/115d138ba599328005c5321c0ef9f00355838ca9","tags":["Patch","fix","web","article","report"]},{"url":"https://github.com/gpg/gnupg/blob/ff30683418695f5d2cc9e6cf8c9418e09378ebe4/g10/armor.c#L1305-L1306","tags":["Product","web","article","report"]},{"url":"https://github.com/gpg/gnupg/compare/gnupg-2.2.50...gnupg-2.2.51","tags":["Patch","web","report"]},{"url":"https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i","tags":["Issue Tracking","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/12/29/11","tags":["Mailing List","Patch","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00008.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68973","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pj23-86ww-f72p","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-68973","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0697","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68973","tags":["report"]},{"url":"https://bugzilla.redhat.com/2425966","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-0697.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0719","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-0719.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0728","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-0728.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-68973","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1768989383.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1769015071.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1769018042.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1769085200.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1769162862.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1769163161.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1769163825.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1769171615.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1769182340.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1769182554.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1769426059.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1769433341.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1769524269.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1769679566.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1770982328.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1786038406.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68973.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-68973","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0197.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34934","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/12/28/1","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7946-1","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/01/27/8","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/01/27/11","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1072","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425966","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0697.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68973","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0719.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0728.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0935","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0935.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0974","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0974.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1014","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1014.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1229","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1229.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1230","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1230.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1468","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1468.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1629","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1629.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1677","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1677.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1705","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1705.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1719","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1719.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:0697","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:0719","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:0728","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260214-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255715","tags":["report"]},{"url":"https://bugzilla.suse.com/1256244","tags":["report"]},{"url":"https://bugzilla.suse.com/1256246","tags":["report"]},{"url":"https://bugzilla.suse.com/1256390","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68973","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260215-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256243","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260378-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256389","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620080-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620108-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620243-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620356-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-68973","tags":["report"]},{"url":"https://github.com/gpg/gnupg/commit/4ecc5122f20e10c17172ed72f4fa46c784b5fb48","tags":["report"]},{"url":"https://github.com/gpg/gnupg/commit/1e929abd20fa2e4be3797a137caca63a971d5372","tags":["report"]},{"url":"https://dev.gnupg.org/T7906","tags":["report"]},{"url":"https://dev.gnupg.org/T8001","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7946-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-68973","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T16:19:11.019Z","modified":"2026-04-30T03:55:53.604Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-675"],"updated_at":"2026-11-02T14:32:35.742256Z"}],"euvd":[{"id":"EUVD-2025-205519","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T16:19:11Z","modified":"2026-04-30T03:55:53Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:05:19.555165Z"}],"ghsa":[{"id":"GHSA-pj23-86ww-f72p","title":"In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where...","description":"In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.","status":"published","published":"2025-12-28T18:30:26Z","modified":"2026-01-14T21:35:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-675","CWE-787"],"updated_at":"2026-11-02T15:05:36.917125Z"}],"nvd":[{"id":"CVE-2025-68973","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T17:16:01.5Z","modified":"2026-10-13T09:10:00.323Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-675","CWE-787"],"updated_at":"2026-11-02T14:11:53.683969Z"}],"osv":[{"id":"ALPINE-CVE-2025-68973","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T17:16:01.5Z","modified":"2026-08-27T22:18:03.054422423Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-68973","status":"published","published":"2025-12-30T06:07:32.54558Z","modified":"2026-03-04T08:18:01.684909Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.77042Z"},{"id":"CVE-2025-68973","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T16:19:11.019Z","modified":"2026-10-28T11:06:36.967326258Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-675"],"updated_at":"2026-11-02T15:44:52.859856Z"},{"id":"DEBIAN-CVE-2025-68973","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T17:16:01.5Z","modified":"2026-10-14T09:47:26.14412097Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:48.025964Z"},{"id":"JLSEC-2026-563","title":"In GnuPG through 2.4.8, `armor_filter` in g10/armor.c has two increments of an index variable where...","description":"In GnuPG before 2.4.9, `armor_filter` in `g10/armor.c` has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2026-05-27T18:18:39.624Z","modified":"2026-07-25T18:24:38.475680302Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2026-1072","title":"gnupg2 security update","description":"GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP).  GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories.\r\n\r\nSecurity Fix(es):\n\nIn GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input.(CVE-2025-68973)","status":"published","published":"2026-01-16T11:10:06Z","modified":"2026-08-18T01:19:26.619980289Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"RHSA-2026:0697","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-16T10:09:32Z","modified":"2026-09-22T10:07:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:0719","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-16T10:09:36Z","modified":"2026-09-22T10:07:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:0728","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-16T10:09:36Z","modified":"2026-09-22T10:07:10Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:0935","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-22T10:18:21Z","modified":"2026-09-22T10:07:12Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:0974","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-22T10:18:23Z","modified":"2026-09-22T10:07:13Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:1014","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-23T10:14:14Z","modified":"2026-09-22T10:07:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:1229","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-27T10:12:53Z","modified":"2026-09-22T10:07:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:1230","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-27T10:12:53Z","modified":"2026-09-22T10:07:50Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:1468","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-01-28T10:13:42Z","modified":"2026-09-22T10:08:11Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:1629","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-02-02T10:07:28Z","modified":"2026-09-22T10:08:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:1677","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-02-02T10:07:31Z","modified":"2026-09-22T10:08:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:1705","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-02-03T10:13:52Z","modified":"2026-09-22T10:08:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:1719","title":"Red Hat Security Advisory: gnupg2 security update","status":"published","published":"2026-02-03T10:13:54Z","modified":"2026-09-22T10:08:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RLSA-2026:0697","title":"Important: gnupg2 security update","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.\n\nSecurity Fix(es):\n\n* GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-17T09:07:37.776055Z","modified":"2026-01-17T09:30:06.787482Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:0719","title":"Important: gnupg2 security update","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.\n\nSecurity Fix(es):\n\n* GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-20T09:05:33.258641Z","modified":"2026-01-20T09:30:48.578287Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:0728","title":"Important: gnupg2 security update","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.\n\nSecurity Fix(es):\n\n* GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-17T09:02:53.907118Z","modified":"2026-01-17T09:30:06.275694Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2025-68973","title":"CVE-2025-68973 in gnupg - Patched by Root","description":"Root has patched CVE-2025-68973 in the gnupg package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:26:21Z","modified":"2026-09-29T10:15:08.43864316Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2025-68973","title":"CVE-2025-68973 in gnupg2 - Patched by Root","description":"Root has patched CVE-2025-68973 in the gnupg2 package for Root:Debian:11. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-20T12:57:43Z","modified":"2026-09-09T14:00:05.680470557Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-UBUNTU-2004-CVE-2025-68973","title":"CVE-2025-68973 in gnupg2 - Patched by Root","description":"Root has patched CVE-2025-68973 in the gnupg2 package for Root:Ubuntu:20.04. Multiple fixed versions available.","status":"published","published":"2026-10-07T14:38:55Z","modified":"2026-10-07T15:15:22.461322175Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:33.943322Z"},{"id":"UBUNTU-CVE-2025-68973","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T17:16:00Z","modified":"2026-02-05T00:30:28.335358Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"ALSA-2026:0697","title":"Important: gnupg2 security update","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.  \n\nSecurity Fix(es):  \n\n  * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-01-15T00:00:00Z","modified":"2026-10-29T11:58:15.101923Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:0719","title":"Important: gnupg2 security update","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.  \n\nSecurity Fix(es):  \n\n  * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-01-15T00:00:00Z","modified":"2026-10-29T11:32:30.13436801Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:0728","title":"Important: gnupg2 security update","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.  \n\nSecurity Fix(es):  \n\n  * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write (CVE-2025-68973)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-01-15T00:00:00Z","modified":"2026-10-29T11:02:28.533905736Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-73204","title":"CVE-2025-68973 affecting package gnupg2 for versions less than 2.4.9-1","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T17:16:01Z","modified":"2026-04-21T04:52:01.999301Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"AZL-73367","title":"CVE-2025-68973 affecting package gnupg2 for versions less than 2.4.0-3","description":"In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)","status":"published","published":"2025-12-28T17:16:01Z","modified":"2026-04-21T04:33:51.885319Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"CLSA-2026-1768989383","title":"Fix CVE(s): CVE-2025-68973","description":"   * SECURITY UPDATE: Possible memory corruption in the armor parser\n     - debian/patches/CVE-2025-68973.patch: fix faulty double increment\n     - CVE-2025-68973","status":"published","published":"2026-01-22T14:00:16Z","modified":"2026-06-04T10:03:18.578426Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769015071","title":"Fix CVE(s): CVE-2025-68973","description":"   * SECURITY UPDATE: memory corruption in armor parser\n     - debian/patches/CVE-2025-68973.patch: Fix faulty double increment\n       in armor_filter function.\n     - CVE-2025-68973","status":"published","published":"2026-01-23T19:03:15Z","modified":"2026-06-04T10:03:13.013603Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769018042","title":"Fix CVE(s): CVE-2025-68973","description":"   * SECURITY UPDATE: memory corruption in armor parser\n     - debian/patches/CVE-2025-68973.patch: Fix faulty double increment\n       in armor_filter function.\n     - CVE-2025-68973","status":"published","published":"2026-03-06T16:32:47Z","modified":"2026-06-04T10:04:10.650478Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769085200","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix possible memory corruption in the armor parser","status":"published","published":"2026-01-22T12:33:23Z","modified":"2026-06-01T00:32:40.364492941Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769162862","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix faulty double increment","status":"published","published":"2026-01-23T10:07:46Z","modified":"2026-06-01T00:33:01.244766571Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769163161","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix faulty double increment","status":"published","published":"2026-01-23T10:12:44Z","modified":"2026-06-01T00:33:21.422161853Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769163825","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix faulty double increment","status":"published","published":"2026-01-23T10:23:49Z","modified":"2026-06-01T00:33:23.239864409Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769171615","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix possible memory corruption in the armor parser that could\n  lead to out-of-bounds write for crafted input","status":"published","published":"2026-01-23T12:33:39Z","modified":"2026-06-01T00:33:25.901311728Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769182340","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds\n  write for malicious input","status":"published","published":"2026-01-23T15:32:24Z","modified":"2026-06-01T00:32:07.604604001Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769182554","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds\n  write for malicious input","status":"published","published":"2026-01-23T15:35:58Z","modified":"2026-06-01T00:33:28.027248295Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769426059","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix possible memory corruption in the armor parser that could\n  lead to out-of-bounds write for crafted input","status":"published","published":"2026-01-26T13:16:55Z","modified":"2026-06-01T00:33:16.723211002Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769433341","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds\n  write for malicious input","status":"published","published":"2026-01-26T13:15:45Z","modified":"2026-06-01T00:33:18.27973857Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769524269","title":"Fix CVE(s): CVE-2025-68973","description":"   * SECURITY UPDATE: memory corruption in armor parser\n     - debian/patches/CVE-2025-68973.patch: fix faulty double increment.\n     - CVE-2025-68973","status":"published","published":"2026-01-27T14:31:13Z","modified":"2026-06-04T10:04:19.778397Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769679566","title":"gnupg2: Fix of CVE-2025-68973","description":"- CVE-2025-68973: fix out-of-bounds write in armor_filter function by correcting\n  index variable increments","status":"published","published":"2026-01-29T09:39:30Z","modified":"2026-06-01T00:31:42.369560576Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1770982328","title":"Fix CVE(s): CVE-2025-68973","description":"   * SECURITY UPDATE: Possible memory corruption in the armor parser\n     - debian/patches/CVE-2025-68973.patch: fix faulty double increment\n     - CVE-2025-68973","status":"published","published":"2026-02-13T11:32:12Z","modified":"2026-06-04T10:03:48.188741Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1786038406","title":"gnupg2: Fix of CVE-2025-68973","description":"- Re-tag base release to 2.0.22-5.0.1 to align NVR with Oracle Linux errata\n- CVE-2025-68973: some improvements","status":"published","published":"2026-08-13T02:13:36Z","modified":"2026-10-26T09:31:46.164511831Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"DLA-4437-1","title":"gnupg2 - security update","status":"published","published":"2026-01-14T00:00:00Z","modified":"2026-01-14T16:15:06.405113Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2026-0197","title":"Updated gnupg2 packages fix security vulnerabilities","description":"CVE-2025-68973, armor_filter in g10/armor.c has two increments of an\nindex variable where one is intended, leading to an out-of-bounds write\nfor crafted input.\nCVE-2026-24882, a stack-based buffer overflow exists in tpm2daemon\nduring handling of the PKDECRYPT command for TPM-backed RSA and ECC\nkeys.\nCVE-2026-24883, a long signature packet length causes parse_signature to\nreturn success with sig-\u003edata[] set to a NULL value, leading to a denial\nof service (application crash).\nUpstream has still not fixed CVE-2025-68972. We will be tracking the solution\nand providing an update to fix it when possible. \n","status":"published","published":"2026-06-11T16:55:52Z","modified":"2026-06-11T17:00:04.885717604Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10001-1","title":"dirmngr-2.5.16-1.1 on GA media","description":"These are all security issues fixed in the dirmngr-2.5.16-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-01T00:00:00Z","modified":"2026-03-23T04:54:19.720869Z","updated_at":"2026-11-02T16:58:38.101535Z"}]},"sources_more":{"osv":13}}