UbuntuUpdates.org

Package "gnupg2"

Name: gnupg2

Description:

GNU privacy guard - a free PGP replacement (dummy transitional package)
Latest version: 2.4.8-4ubuntu3.1
Release: resolute (26.04)
Level: updates
Repository: universe
Homepage: https://www.gnupg.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gnupg2"

All arch deb package
APT INSTALL

Other versions of "gnupg2" in Resolute

Repository Area Version
base main 2.4.8-4ubuntu3
base universe 2.4.8-4ubuntu3
security main 2.4.8-4ubuntu3.1
security universe 2.4.8-4ubuntu3.1
updates main 2.4.8-4ubuntu3.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.4.8-4ubuntu3.1 2026-09-03 15:07:46 UTC

gnupg2 (2.4.8-4ubuntu3.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Improper Input Validation
    - debian/patches/CVE-2026-57062.patch: gpgsm: Require a minimum tag length
      for GCM decryption. in sm/decrypt.c.
    - CVE-2026-57062

 -- John Breton Wed, 02 Sep 2026 15:38:37 -0400
CVE-2026-57062 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to b


About   -   Send Feedback to @ubuntu_updates