gpp_maybe Security update for gpg2

SUSE-SLES-16.0-221

This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - CVE-2026-24883: denial of service due to long signature packet length causing parse_signature to return success with sig->data[] set to a NULL value (bsc#1257395). - gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field (bsc#1256389).

• Release Date
  Jan 29 2026
• References
  Bugzilla: 1257395, 1257396, 1256389
  CVEs: CVE-2026-24883, CVE-2026-24882
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.4.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.4.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.4.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.4.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.4.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.4.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.4.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.4.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.4.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.4.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  dirmngr
  Keyserver, CRL, and OCSP access for GnuPG

  2.5.5-160000.4.1 lock rpm

  gpg2
  File encryption, decryption, signature creation and verification utility

  2.5.5-160000.4.1 lock rpm

  gpg2-lang
  Translations for package gpg2

  2.5.5-160000.4.1 lock rpm

  gpg2-tpm
  TPM2 support for GnuPG

  2.5.5-160000.4.1 lock rpm