SUSE-SU-2026:0214-1

Опубликовано: 22 янв. 2026

Источник: suse-cvrf

Описание

Security update for gpg2

This update for gpg2 fixes the following issues:

CVE-2025-68973: Fix possible memory corruption in the armor parser (gpg.fail/memcpy)(bsc#1255715).
Avoid potential downgrade to SHA1 in 3rd party key signatures (gpg.fail/sha1) (bsc#1256246).
Error out on unverified output for non-detached signatures (gpg.fail/detached) (bsc#1256244).
Fix Cleartext Signature Forgery in the NotDashEscaped header implementation in GnuPG (gpg.fail/notdash) (bsc#1256390).

Список пакетов

Container suse/ltss/sle15.4/sle15:latest

gpg2-2.2.27-150300.3.16.1

Container suse/ltss/sle15.5/sle15:latest

gpg2-2.2.27-150300.3.16.1

Container suse/manager/4.3/proxy-httpd:latest

gpg2-2.2.27-150300.3.16.1

Container suse/manager/4.3/proxy-salt-broker:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro-rancher/5.2:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro-rancher/5.3:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro-rancher/5.4:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro/5.2/toolbox:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro/5.3/toolbox:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro/5.4/toolbox:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro/5.5/toolbox:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro/5.5:latest

gpg2-2.2.27-150300.3.16.1

Container suse/sle-micro/base-5.5:latest

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-CHOST-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-CHOST-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-CHOST-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-CHOST-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-HPC-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-HPC-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-HPC-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-HPC-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-HPC-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-HPC-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Hardened-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Hardened-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Hardened-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Hardened-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Micro-5-3-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Micro-5-4-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Hardened

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Hardened-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Hardened-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAP-Hardened-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAPCAL

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAPCAL-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAPCAL-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP4-SAPCAL-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Azure-3P

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Azure-Basic

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Azure-Standard

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-CHOST-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-CHOST-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-CHOST-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-CHOST-BYOS-GDC

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-HPC-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-HPC-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-HPC-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-HPC-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Hardened-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Hardened-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Hardened-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-Micro-5-5-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Azure-3P

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Hardened-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAP-Hardened-GCE

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAPCAL-Azure

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAPCAL-EC2

gpg2-2.2.27-150300.3.16.1

Image SLES15-SP5-SAPCAL-GCE

gpg2-2.2.27-150300.3.16.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

SUSE Linux Enterprise Micro 5.2

gpg2-2.2.27-150300.3.16.1

SUSE Linux Enterprise Micro 5.3

gpg2-2.2.27-150300.3.16.1

SUSE Linux Enterprise Micro 5.4

gpg2-2.2.27-150300.3.16.1

SUSE Linux Enterprise Micro 5.5

gpg2-2.2.27-150300.3.16.1

SUSE Linux Enterprise Server 15 SP4-LTSS

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

SUSE Linux Enterprise Server 15 SP5-LTSS

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

dirmngr-2.2.27-150300.3.16.1

gpg2-2.2.27-150300.3.16.1

gpg2-lang-2.2.27-150300.3.16.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20260214-1/
Link for SUSE-SU-2026:0214-1
https://lists.suse.com/pipermail/sle-security-updates/2026-January/023871.html
E-Mail link for SUSE-SU-2026:0214-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1255715
SUSE Bug 1255715
https://bugzilla.suse.com/1256244
SUSE Bug 1256244
https://bugzilla.suse.com/1256246
SUSE Bug 1256246
https://bugzilla.suse.com/1256390
SUSE Bug 1256390
https://www.suse.com/security/cve/CVE-2025-68973/
SUSE CVE CVE-2025-68973 page

Описание

In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

Затронутые продукты

Container suse/ltss/sle15.4/sle15:latest:gpg2-2.2.27-150300.3.16.1

Container suse/ltss/sle15.5/sle15:latest:gpg2-2.2.27-150300.3.16.1

Container suse/manager/4.3/proxy-httpd:latest:gpg2-2.2.27-150300.3.16.1

Container suse/manager/4.3/proxy-salt-broker:latest:gpg2-2.2.27-150300.3.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-68973.html
CVE-2025-68973
https://bugzilla.suse.com/1255714
SUSE Bug 1255714
https://bugzilla.suse.com/1255715
SUSE Bug 1255715
https://bugzilla.suse.com/1263698
SUSE Bug 1263698