UbuntuUpdates.org

Package "gnupg2"

Name: gnupg2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • GNU privacy guard - network certificate management service
  • GNU privacy guard - a free PGP replacement
  • GNU privacy guard - localization files
  • GNU privacy guard - utility programs
Latest version: 2.4.8-4ubuntu3.1
Release: resolute (26.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "gnupg2" in Resolute

Repository Area Version
base main 2.4.8-4ubuntu3
base universe 2.4.8-4ubuntu3
security universe 2.4.8-4ubuntu3.1
updates main 2.4.8-4ubuntu3.1
updates universe 2.4.8-4ubuntu3.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.4.8-4ubuntu3.1 2026-09-03 13:07:43 UTC

gnupg2 (2.4.8-4ubuntu3.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Improper Input Validation
    - debian/patches/CVE-2026-57062.patch: gpgsm: Require a minimum tag length
      for GCM decryption. in sm/decrypt.c.
    - CVE-2026-57062

 -- John Breton Wed, 02 Sep 2026 15:38:37 -0400
CVE-2026-57062 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to b


About   -   Send Feedback to @ubuntu_updates