gpp_maybe Security update for gpg2

SUSE-SL-Micro-6.2-138

This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures (bsc#1256246). - gpg: Error out on unverified output for non-detached signatures (bsc#1256244). - gpg: Deprecate the option --not-dash-escaped (bsc#1256390).

• Release Date
  Jan 14 2026
• References
  Bugzilla: 1256246, 1256390, 1255715, 1256244
  CVEs: CVE-2025-68973
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.2 ppc64le

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

SUSE Linux Micro 6.2 aarch64

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

SUSE Linux Micro 6.2 s390x

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

SUSE Linux Micro 6.2 x86_64

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm