Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 477
Alerts This Week
Warning Icon 1 477

openSUSE Leap 16.0 gpg2 Low CMS Parsing Issue 2026-21385-1

opensuse
Calendar Grey July 23, 2026
Scroller Opensuse
This advisory addresses a low-level security issue in gpg2 for openSUSE Leap 16.0 with installation guidance.
openSUSE released a security update for gpg2 addressing CVE-2026-57062, resolving a vulnerability in CMS parsing for AES-GCM on openSUSE Leap 16.0, along with a bug fix.

Description

This update for gpg2 fixes the following issue:

- CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1288=1

Topics%20covered

Topics Covered

security advisory bug fix low install instructions OpenSUSE gpg2

Patch

Package List

- openSUSE Leap 16.0:

dirmngr-2.5.5-160000.6.1

gpg2-2.5.5-160000.6.1

gpg2-lang-2.5.5-160000.6.1

gpg2-tpm-2.5.5-160000.6.1

References

* bsc#1269279

References:

* https://www.suse.com/security/cve/CVE-2026-57062.html

Severity
low
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21385-1
Rating: low

Topics%20covered

Topics Covered

security advisory bug fix low install instructions OpenSUSE gpg2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.