< back to search

gpp_maybe Security update for gpg2
SUSE-SLE-Module-Basesystem-15-SP7-2026-215

This update for gpg2 fixes the following issues: - CVE-2025-68973: Fix possible memory corruption in the armor parser (gpg.fail/memcpy)(bsc#1255715). - Avoid potential downgrade to SHA1 in 3rd party key signatures (gpg.fail/sha1) (bsc#1256246). - Error out on unverified output for non-detached signatures (gpg.fail/detached) (bsc#1256244). - Fix a memory leak in gpg2 agent (bsc#1256243). - Fix Cleartext Signature Forgery in the NotDashEscaped header implementation in GnuPG (gpg.fail/notdash) (bsc#1256390).

cloud_download Downloads

Basesystem Module 15.7 ppc64le
  • Packages
    dirmngr
    Keyserver, CRL, and OCSP access for GnuPG
    2.4.4-150600.3.12.1 lock rpm
    gpg2
    File encryption, decryption, signature creation and verification utility
    2.4.4-150600.3.12.1 lock rpm lock src
    gpg2-lang
    Translations for package gpg2
    2.4.4-150600.3.12.1 lock rpm
Basesystem Module 15.7 s390x
  • Packages
    dirmngr
    Keyserver, CRL, and OCSP access for GnuPG
    2.4.4-150600.3.12.1 lock rpm
    gpg2
    File encryption, decryption, signature creation and verification utility
    2.4.4-150600.3.12.1 lock rpm lock src
    gpg2-lang
    Translations for package gpg2
    2.4.4-150600.3.12.1 lock rpm
Basesystem Module 15.7 aarch64
  • Packages
    dirmngr
    Keyserver, CRL, and OCSP access for GnuPG
    2.4.4-150600.3.12.1 lock rpm
    gpg2
    File encryption, decryption, signature creation and verification utility
    2.4.4-150600.3.12.1 lock rpm lock src
    gpg2-lang
    Translations for package gpg2
    2.4.4-150600.3.12.1 lock rpm
Basesystem Module 15.7 x86_64
  • Packages
    dirmngr
    Keyserver, CRL, and OCSP access for GnuPG
    2.4.4-150600.3.12.1 lock rpm
    gpg2
    File encryption, decryption, signature creation and verification utility
    2.4.4-150600.3.12.1 lock rpm lock src
    gpg2-lang
    Translations for package gpg2
    2.4.4-150600.3.12.1 lock rpm