Alpine/gnupg: high 7.8
GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD pref
Action: Upgrade gnupg to 2.2.23-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.23-r0 | - |
Fixed versions
| 2.2.23-r0 |
Sources
published · modified · JSON