Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 43 gnupg2 Critical Buffer Overflow Fix CVE-2026-24882

fedora
Calendar Grey February 5, 2026
Dist Fedora Esm H88
Fix for a critical stack-based buffer overflow in tpm2daemon, leading to arbitrary code execution for Fedora users. Updates available.
Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution

Summary

GnuPG is GNU's tool for secure communication and data storage. It can

be used to encrypt data and to create digital signatures. It includes

an advanced key management facility and is compliant with the proposed

OpenPGP Internet standard as described in RFC2440 and the S/MIME

standard as described by several RFCs.

GnuPG 2.0 is a newer version of GnuPG with additional support for

S/MIME. It has a different design philosophy that splits

functionality up into several modules. The S/MIME and smartcard functionality

is provided by the gnupg2-smime package.

Update Information:

Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical code execution gnupg2

Change Log

* Wed Jan 28 2026 Jakub Jelen - 2.4.9-5 - Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution

References


[ 1 ] Bug #2433665 - CVE-2026-24882 gnupg2: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2433665

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d5c00a447f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: gnupg2
Product: Fedora 43
Version: 2.4.9
Release: 5.fc43
URL: https://www.gnupg.org/
Summary: Utility for secure communication and data storage

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical code execution gnupg2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here