Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3243-1

Опубликовано: 24 июл. 2026
Источник: suse-cvrf

Описание

Security update for gpg2

This update for gpg2 fixes the following issue:

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).

Список пакетов

Container bci/spack:latest
gpg2-2.4.4-150600.3.18.1
Container suse/rmt-server:latest
gpg2-2.4.4-150600.3.18.1
Container suse/sle15:latest
gpg2-2.4.4-150600.3.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
dirmngr-2.4.4-150600.3.18.1
gpg2-2.4.4-150600.3.18.1
gpg2-lang-2.4.4-150600.3.18.1

Ссылки

Описание

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Затронутые продукты
Container bci/spack:latest:gpg2-2.4.4-150600.3.18.1
Container suse/rmt-server:latest:gpg2-2.4.4-150600.3.18.1
Container suse/sle15:latest:gpg2-2.4.4-150600.3.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:dirmngr-2.4.4-150600.3.18.1
Ссылки