Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 35 articles for you...
219
security advisorybuffer overflowremote code executionRocky Linux 10 gnupg2 Important Buffer Overflow RLSA-2026-2719
Important: gnupg2 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:2719", "synopsis": "Important: gnupg2 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for gnupg2.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.\n\nSecurity Fix(es):\n\n* GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution (CVE-2026-24882)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2433464", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2433464", "description": ""}], "cves": [{"name": "CVE-2026-24882", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-24882", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "8.4", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-02-24T18:56:34.668877Z", "rpms": {"Rocky Linux 10": {"nvras": ["gnupg2-0:2.4.5-4.el10_1.src.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-0:2.4.5-4.el10_1.aarch64.rpm","gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.ppc64le.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important gnupg2 security update in Rocky Linux addresses a buffer overflow issue allowing remote code execution. Update recommended.. Rocky Linux security update, gnupg2 exploit, buffer overflow fix. . Severity: Important. LinuxSecurity.com Team
Feb 24, 2026
•Important
Rocky Linux
219
security advisorybuffer overflowremote code executionRocky Linux 10 gnupg2 Significant Memory Leak Risk RLSA-2026-2921
Important: gnupg2 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:2719", "synopsis": "Important: gnupg2 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for gnupg2.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.\n\nSecurity Fix(es):\n\n* GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution (CVE-2026-24882)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2433464", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2433464", "description": ""}], "cves": [{"name": "CVE-2026-24882", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-24882", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvss3BaseScore": "8.4", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-02-24T18:56:34.668877Z", "rpms": {"Rocky Linux 10": {"nvras": ["gnupg2-0:2.4.5-4.el10_1.src.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-0:2.4.5-4.el10_1.aarch64.rpm","gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-0:2.4.5-4.el10_1.s390x.rpm", "gnupg2-smime-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.aarch64.rpm", "gnupg2-smime-debuginfo-0:2.4.5-4.el10_1.ppc64le.rpm", "gnupg2-debugsource-0:2.4.5-4.el10_1.x86_64.rpm", "gnupg2-debuginfo-0:2.4.5-4.el10_1.ppc64le.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for gnupg2 on Rocky Linux addresses a buffer overflow which may lead to code execution risks.. gnupg2 security update, Rocky Linux update, Important security advisory, buffer overflow fix, remote code execution fix. . Severity: Important. LinuxSecurity.com Team
Feb 24, 2026
•Important
Rocky Linux
217
security advisorybuffer overflowremote accessOracle Linux 7 gnupg2 Important Patch for CVE-2025-68973 ELSA-2026-1677
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-1677 http://linux.oracle.com/errata/ELSA-2026-1677.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: gnupg2-2.0.22-5.0.1.el7_5.x86_64.rpm gnupg2-smime-2.0.22-5.0.1.el7_5.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/gnupg2-2.0.22-5.0.1.el7_5.src.rpm Related CVEs: CVE-2025-68973 Description of changes: [2.0.22-5.0.1] - Fix CVE-2025-68973 (gpg.fail/memcpy) [Orabug: 38914175] _______________________________________________ El-errata mailing list
Feb 23, 2026
•Important
Oracle
217
security advisorybuffer overflowimportantOracle Linux 10 gnupg2 Important Buffer Overflow Patch ELSA-2026-2719
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-2719 http://linux.oracle.com/errata/ELSA-2026-2719.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: gnupg2-2.4.5-4.el10_1.x86_64.rpm gnupg2-smime-2.4.5-4.el10_1.x86_64.rpm aarch64: gnupg2-2.4.5-4.el10_1.aarch64.rpm gnupg2-smime-2.4.5-4.el10_1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/gnupg2-2.4.5-4.el10_1.src.rpm Related CVEs: CVE-2026-24882 Description of changes: [2.4.5-4] - Fix CVE-2026-24882 (tpm2daemon buffer overflow) _______________________________________________ El-errata mailing list
Feb 17, 2026
•Important
Oracle
89
security advisoryfedoracriticalFedora 42 gnupg2 Critical Stack Overflow Vulnerability for Code Execution
Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-59fdfa64f5 2026-02-17 01:16:30.424623+00:00 -------------------------------------------------------------------------------- Name : gnupg2 Product : Fedora 42 Version : 2.4.9 Release : 2.fc42 URL : https://www.gnupg.org/ Summary : Utility for secure communication and data storage Description : GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described by several RFCs. GnuPG 2.0 is a newer version of GnuPG with additional support for S/MIME. It has a different design philosophy that splits functionality up into several modules. The S/MIME and smartcard functionality is provided by the gnupg2-smime package. -------------------------------------------------------------------------------- Update Information: Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 3 2026 Jakub Jelen - 2.4.9-2 - Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433663 - CVE-2026-24882 gnupg2: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2433663 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-59fdfa64f5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 17, 2026
•Critical
Fedora
89
security advisoryfedorabuffer overflowFedora 43 gnupg2 Critical Buffer Overflow Fix CVE-2026-24882
Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-d5c00a447f 2026-02-05 00:57:20.049144+00:00 -------------------------------------------------------------------------------- Name : gnupg2 Product : Fedora 43 Version : 2.4.9 Release : 5.fc43 URL : https://www.gnupg.org/ Summary : Utility for secure communication and data storage Description : GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described by several RFCs. GnuPG 2.0 is a newer version of GnuPG with additional support for S/MIME. It has a different design philosophy that splits functionality up into several modules. The S/MIME and smartcard functionality is provided by the gnupg2-smime package. -------------------------------------------------------------------------------- Update Information: Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 28 2026 Jakub Jelen - 2.4.9-5 - Fix CVE-2026-24882: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433665 - CVE-2026-24882 gnupg2: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2433665 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-d5c00a447f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 05, 2026
•Critical
Fedora
217
security advisorysecurity fiximportantOracle Linux 10 ELSA-2026-0697 gnupg2 Important Memory Issue Fix
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-0697 http://linux.oracle.com/errata/ELSA-2026-0697.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: gnupg2-2.4.5-3.el10_1.x86_64.rpm gnupg2-smime-2.4.5-3.el10_1.x86_64.rpm aarch64: gnupg2-2.4.5-3.el10_1.aarch64.rpm gnupg2-smime-2.4.5-3.el10_1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/gnupg2-2.4.5-3.el10_1.src.rpm Related CVEs: CVE-2025-68973 Description of changes: [2.4.5-3] - Fix CVE-2025-68973 (gpg.fail/memcpy) - Avoid weak dependencies _______________________________________________ El-errata mailing list
Jan 15, 2026
•Important
Oracle
217
security advisoryremote exploitimportantOracle Linux 9 gnupg2 Important CVE-2025-68973 Advisory ELSA-2026-0719
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-0719 http://linux.oracle.com/errata/ELSA-2026-0719.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: gnupg2-2.3.3-5.el9_7.x86_64.rpm gnupg2-smime-2.3.3-5.el9_7.x86_64.rpm aarch64: gnupg2-2.3.3-5.el9_7.aarch64.rpm gnupg2-smime-2.3.3-5.el9_7.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/gnupg2-2.3.3-5.el9_7.src.rpm Related CVEs: CVE-2025-68973 Description of changes: [2.3.3-5] - Fix CVE-2025-68973 (gpg.fail/memcpy) _______________________________________________ El-errata mailing list
Jan 15, 2026
•Important
Oracle
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!