Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/gnupg2@2.1.18-6
purl pkg:deb/debian/gnupg2@2.1.18-6
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-9cm4-mu3q-2yey
Aliases:
CVE-2018-12020
security update
2.1.18-8~deb9u4
Affected by 6 other vulnerabilities.
2.2.12-1
Affected by 3 other vulnerabilities.
VCID-9jj4-5uem-kkbs
Aliases:
CVE-2022-34903
Multiple vulnerabilities have been discovered in GnuPG, the worst of which could lead to signature spoofing.
2.2.12-1+deb10u2
Affected by 3 other vulnerabilities.
2.2.27-2+deb11u2
Affected by 2 other vulnerabilities.
VCID-ba35-1hmw-m3hg
Aliases:
CVE-2018-9234
GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys
2.2.12-1
Affected by 3 other vulnerabilities.
VCID-ng6k-ru7r-9kdp
Aliases:
CVE-2025-68973
GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write
2.2.40-1.1+deb12u2
Affected by 1 other vulnerability.
VCID-qapz-hmnm-x7dd
Aliases:
CVE-2018-1000858
gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service
2.2.12-1
Affected by 3 other vulnerabilities.
VCID-rqt5-xvxx-47h6
Aliases:
CVE-2019-14855
gnupg2: OpenPGP Key Certification Forgeries with SHA-1
2.2.27-2+deb11u2
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T01:09:14.937924+00:00 Debian Oval Importer Affected by VCID-ba35-1hmw-m3hg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T01:06:11.715348+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:33:51.860607+00:00 Debian Oval Importer Affected by VCID-rqt5-xvxx-47h6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:25:45.108989+00:00 Debian Oval Importer Affected by VCID-qapz-hmnm-x7dd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:37:52.254362+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:12:37.966940+00:00 Debian Oval Importer Affected by VCID-ng6k-ru7r-9kdp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:08:47.448358+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:37:42.780426+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-12T00:41:09.468218+00:00 Debian Oval Importer Affected by VCID-ba35-1hmw-m3hg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-12T00:38:11.068079+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:08:54.866382+00:00 Debian Oval Importer Affected by VCID-rqt5-xvxx-47h6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:08:49.477454+00:00 Debian Oval Importer Affected by VCID-qapz-hmnm-x7dd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:24:05.067576+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:59:14.995541+00:00 Debian Oval Importer Affected by VCID-ng6k-ru7r-9kdp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:57:04.552007+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:25:59.868741+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-09T00:10:58.394046+00:00 Debian Oval Importer Affected by VCID-ba35-1hmw-m3hg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-09T00:08:09.052746+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:42:36.583899+00:00 Debian Oval Importer Affected by VCID-rqt5-xvxx-47h6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:52:59.194686+00:00 Debian Oval Importer Affected by VCID-qapz-hmnm-x7dd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:12:18.135330+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:48:46.318266+00:00 Debian Oval Importer Affected by VCID-ng6k-ru7r-9kdp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T23:29:11.987608+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T22:59:28.635817+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0