Search for packages
| purl | pkg:deb/debian/gnupg2@2.2.12-1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9jj4-5uem-kkbs
Aliases: CVE-2022-34903 |
Multiple vulnerabilities have been discovered in GnuPG, the worst of which could lead to signature spoofing. |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-ng6k-ru7r-9kdp
Aliases: CVE-2025-68973 |
GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write |
Affected by 1 other vulnerability. |
|
VCID-rqt5-xvxx-47h6
Aliases: CVE-2019-14855 |
gnupg2: OpenPGP Key Certification Forgeries with SHA-1 |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-9cm4-mu3q-2yey | security update |
CVE-2018-12020
|
| VCID-ba35-1hmw-m3hg | GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys |
CVE-2018-9234
|
| VCID-qapz-hmnm-x7dd | gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service |
CVE-2018-1000858
|