PatchFirst · Свежие уязвимости
За последние 30 дней в gnupg2 опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.