gpp_maybe Security update for gpg2

SUSE-SLE-Micro-6.1-374

This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures (bsc#1256246). - gpg: Error out on unverified output for non-detached signatures (bsc#1256244). - agent: Fix a memory leak (bsc#1256243). - gpg: Deprecate the option --not-dash-escaped (bsc#1256390).

• Release Date
  Jan 14 2026
• References
  Bugzilla: 1255715, 1256243, 1256244, 1256246, 1256390
  CVEs: CVE-2025-68973
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.1 ppc64le

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.4.4-slfo.1.1_6.1 lock rpm

SUSE Linux Micro 6.1 aarch64

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.4.4-slfo.1.1_6.1 lock rpm

SUSE Linux Micro 6.1 s390x

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.4.4-slfo.1.1_6.1 lock rpm

SUSE Linux Micro 6.1 x86_64

• Packages
  gpg2
  File encryption, decryption, signature creation and verification utility

  2.4.4-slfo.1.1_6.1 lock rpm