{"id":"MGASA-2025-0206","aliases":[],"status":"published","title":"Updated gnupg2 packages fix security vulnerabilities","description":"Key validity not computed when key is certified by a trusted\n\"certify-only\" key (regression due to patch for CVE-2025-30258)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-07-11T18:52:28Z","modified":"2026-04-16T04:21:19Z","fixes":[{"ecosystem":"Mageia:9","package":"gnupg2","fixed_in":["2.3.8-1.4.mga9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:9","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-1.4.mga9"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2025-0206.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34458","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7412-2","tags":["advisory"]}],"sources":{"osv":[{"id":"MGASA-2025-0206","title":"Updated gnupg2 packages fix security vulnerabilities","description":"Key validity not computed when key is certified by a trusted\n\"certify-only\" key (regression due to patch for CVE-2025-30258)\n","status":"published","published":"2025-07-11T18:52:28Z","modified":"2026-04-16T04:21:19.320669Z","updated_at":"2026-11-02T15:49:43.178336Z"}]}}