gpp_maybe Security update for gpg2

SUSE-SL-Micro-6.2-221

This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to return success with sig->data[] set to a NULL value (bsc#1257395). - gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field (bsc#1256389).

• Release Date
  Jan 29 2026
• References
  Bugzilla: 1257395, 1257396, 1256389
  CVEs: CVE-2026-24883, CVE-2026-24882
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.2 s390x

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

SUSE Linux Micro 6.2 ppc64le

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

SUSE Linux Micro 6.2 aarch64

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

SUSE Linux Micro 6.2 x86_64

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm