Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21385-1

Опубликовано: 20 июл. 2026
Источник: suse-cvrf

Описание

Security update for gpg2

This update for gpg2 fixes the following issue:

  • CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).

Список пакетов

openSUSE Leap 16.0
dirmngr-2.5.5-160000.6.1
gpg2-2.5.5-160000.6.1
gpg2-lang-2.5.5-160000.6.1
gpg2-tpm-2.5.5-160000.6.1

Ссылки

Описание

CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Затронутые продукты
openSUSE Leap 16.0:dirmngr-2.5.5-160000.6.1
openSUSE Leap 16.0:gpg2-2.5.5-160000.6.1
openSUSE Leap 16.0:gpg2-lang-2.5.5-160000.6.1
openSUSE Leap 16.0:gpg2-tpm-2.5.5-160000.6.1
Ссылки