Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/gnupg2@2.1.18-8~deb9u4
purl pkg:deb/debian/gnupg2@2.1.18-8~deb9u4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-9cm4-mu3q-2yey
Aliases:
CVE-2018-12020
security update
2.2.12-1
Affected by 3 other vulnerabilities.
VCID-9jj4-5uem-kkbs
Aliases:
CVE-2022-34903
Multiple vulnerabilities have been discovered in GnuPG, the worst of which could lead to signature spoofing.
2.2.12-1+deb10u2
Affected by 3 other vulnerabilities.
2.2.27-2+deb11u2
Affected by 2 other vulnerabilities.
VCID-ba35-1hmw-m3hg
Aliases:
CVE-2018-9234
GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys
2.2.12-1
Affected by 3 other vulnerabilities.
VCID-ng6k-ru7r-9kdp
Aliases:
CVE-2025-68973
GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write
2.2.40-1.1+deb12u2
Affected by 1 other vulnerability.
VCID-qapz-hmnm-x7dd
Aliases:
CVE-2018-1000858
gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service
2.2.12-1
Affected by 3 other vulnerabilities.
VCID-rqt5-xvxx-47h6
Aliases:
CVE-2019-14855
gnupg2: OpenPGP Key Certification Forgeries with SHA-1
2.2.27-2+deb11u2
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-9cm4-mu3q-2yey security update CVE-2018-12020

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T01:09:14.941206+00:00 Debian Oval Importer Affected by VCID-ba35-1hmw-m3hg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T01:06:11.718859+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:33:51.864498+00:00 Debian Oval Importer Affected by VCID-rqt5-xvxx-47h6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:25:45.112848+00:00 Debian Oval Importer Affected by VCID-qapz-hmnm-x7dd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:37:52.258722+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:12:37.970020+00:00 Debian Oval Importer Affected by VCID-ng6k-ru7r-9kdp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:08:47.451892+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:37:42.783772+00:00 Debian Oval Importer Fixing VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-12T00:41:09.472361+00:00 Debian Oval Importer Affected by VCID-ba35-1hmw-m3hg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-12T00:38:11.071913+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:08:54.867923+00:00 Debian Oval Importer Affected by VCID-rqt5-xvxx-47h6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:08:49.481400+00:00 Debian Oval Importer Affected by VCID-qapz-hmnm-x7dd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:24:05.072717+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:59:14.999253+00:00 Debian Oval Importer Affected by VCID-ng6k-ru7r-9kdp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:57:04.556690+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:25:59.872748+00:00 Debian Oval Importer Fixing VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-09T00:10:58.398025+00:00 Debian Oval Importer Affected by VCID-ba35-1hmw-m3hg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-09T00:08:09.056895+00:00 Debian Oval Importer Affected by VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:42:36.588616+00:00 Debian Oval Importer Affected by VCID-rqt5-xvxx-47h6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:52:59.202455+00:00 Debian Oval Importer Affected by VCID-qapz-hmnm-x7dd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:12:18.139307+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:48:46.322857+00:00 Debian Oval Importer Affected by VCID-ng6k-ru7r-9kdp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T23:29:11.989862+00:00 Debian Oval Importer Affected by VCID-9jj4-5uem-kkbs https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T22:59:28.640672+00:00 Debian Oval Importer Fixing VCID-9cm4-mu3q-2yey https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0