gpp_maybe Security update for gpg2

SUSE-SLES-16.0-138

This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures (bsc#1256246). - gpg: Error out on unverified output for non-detached signatures (bsc#1256244). - gpg: Deprecate the option --not-dash-escaped (bsc#1256390).

• Release Date
  Jan 14 2026
• References
  Bugzilla: 1256246, 1256390, 1255715, 1256244
  CVEs: CVE-2025-68973
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.3.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.3.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.3.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.3.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.3.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.3.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.3.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.3.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.3.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.3.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.3.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.3.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.3.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.3.1 lock rpm