SUSE-SU-2026:0434-1

Опубликовано: 11 фев. 2026

Источник: suse-cvrf

Описание

Security update for gpg2

This update for gpg2 fixes the following issues:

Security fixes:

CVE-2026-24882: Fixed stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396)
Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data 'Filename' Field (bsc#1256389)

Список пакетов

Container bci/spack:latest

gpg2-2.4.4-150600.3.15.1

Container suse/cosign:latest

gpg2-2.4.4-150600.3.15.1

Container suse/ltss/sle15.6/sle15:latest

gpg2-2.4.4-150600.3.15.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest

gpg2-2.4.4-150600.3.15.1

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

gpg2-2.4.4-150600.3.15.1

Container suse/manager/5.0/x86_64/server:latest

gpg2-2.4.4-150600.3.15.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latest

gpg2-2.4.4-150600.3.15.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

gpg2-2.4.4-150600.3.15.1

Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest

gpg2-2.4.4-150600.3.15.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

gpg2-2.4.4-150600.3.15.1

Container suse/rmt-server:latest

gpg2-2.4.4-150600.3.15.1

Container suse/sle15:latest

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-Azure-3P

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-Azure-Basic

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-Azure-Standard

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-CHOST-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-CHOST-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-CHOST-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-CHOST-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-CHOST-BYOS-GDC

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-EC2-ECS-HVM

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-HPC-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-Hardened-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-Hardened-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-Hardened-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-Hardened-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Azure-3P

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened-BYOS

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAP-Hardened-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAPCAL

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAPCAL-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAPCAL-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP6-SAPCAL-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-Azure-3P

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-Azure-Basic

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-Azure-Standard

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-CHOST-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-CHOST-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-CHOST-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-CHOST-BYOS-GDC

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-EC2-ECS-HVM

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-GCE-3P

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-HPC-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-HPC-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-HPC-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-HPC-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-Hardened-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-Hardened-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-Hardened-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Azure-3P

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-GCE-3P

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Hardened-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAP-Hardened-GCE

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAPCAL-Azure

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAPCAL-EC2

gpg2-2.4.4-150600.3.15.1

Image SLES15-SP7-SAPCAL-GCE

gpg2-2.4.4-150600.3.15.1

Image proxy-salt-broker-image

gpg2-2.4.4-150600.3.15.1

Image server-image

gpg2-2.4.4-150600.3.15.1

Image server-image-sles15sp7

gpg2-2.4.4-150600.3.15.1

Image server-saline-image

gpg2-2.4.4-150600.3.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

dirmngr-2.4.4-150600.3.15.1

gpg2-2.4.4-150600.3.15.1

gpg2-lang-2.4.4-150600.3.15.1

SUSE Linux Enterprise Server 15 SP6-LTSS

dirmngr-2.4.4-150600.3.15.1

gpg2-2.4.4-150600.3.15.1

gpg2-lang-2.4.4-150600.3.15.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

dirmngr-2.4.4-150600.3.15.1

gpg2-2.4.4-150600.3.15.1

gpg2-lang-2.4.4-150600.3.15.1

openSUSE Leap 15.6

dirmngr-2.4.4-150600.3.15.1

gpg2-2.4.4-150600.3.15.1

gpg2-lang-2.4.4-150600.3.15.1

gpg2-tpm-2.4.4-150600.3.15.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20260434-1/
Link for SUSE-SU-2026:0434-1
https://lists.suse.com/pipermail/sle-security-updates/2026-February/024114.html
E-Mail link for SUSE-SU-2026:0434-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1256389
SUSE Bug 1256389
https://bugzilla.suse.com/1257396
SUSE Bug 1257396
https://www.suse.com/security/cve/CVE-2026-24882/
SUSE CVE CVE-2026-24882 page

Описание

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.

Затронутые продукты

Container bci/spack:latest:gpg2-2.4.4-150600.3.15.1

Container suse/cosign:latest:gpg2-2.4.4-150600.3.15.1

Container suse/ltss/sle15.6/sle15:latest:gpg2-2.4.4-150600.3.15.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest:gpg2-2.4.4-150600.3.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-24882.html
CVE-2026-24882
https://bugzilla.suse.com/1257396
SUSE Bug 1257396