Ubuntu 22.04 LTS USN-7412-2 important: gnupg regression issue

ubuntu

July 9, 2025

USN-7412-1 introduced a regression in GnuPG.

Summary

USN-7412-1 introduced a regression in GnuPG.

Software Description:

- gnupg2: GNU privacy guard - a free PGP replacement

Details:

USN-7412-1 fixed vulnerabilities in GnuPG. The update introduced a

regression. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that GnuPG incorrectly handled importing keys with

certain crafted subkey data. If a user or automated system were tricked

into importing a specially crafted key, a remote attacker may prevent

users from importing other keys in the future.

Topics Covered

security advisory gnupg Ubuntu important GPG regression

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
   gnupg                           2.4.4-2ubuntu23.1
   gnupg2                          2.4.4-2ubuntu23.1
   gpg                             2.4.4-2ubuntu23.1

Ubuntu 24.10
   gnupg                           2.4.4-2ubuntu18.3
   gnupg2                          2.4.4-2ubuntu18.3
   gpg                             2.4.4-2ubuntu18.3

Ubuntu 24.04 LTS
   gnupg                           2.4.4-2ubuntu17.3
   gnupg2                          2.4.4-2ubuntu17.3
   gpg                             2.4.4-2ubuntu17.3

Ubuntu 22.04 LTS
   gnupg                           2.2.27-3ubuntu2.4
   gnupg2                          2.2.27-3ubuntu2.4
   gpg                             2.2.27-3ubuntu2.4

In general, a standard system update will make all the necessary changes.