https://seclists.org/oss-sec/2025/q4/295: Many vulnerabilities in GnuPG
Published Dec 28, 2025
·Updated
Affected Software
1 affected component
gnupg GnuPG
Frequently Asked Questions
1
Can I determine whether my GnuPG deployment is affected from this information?
The provided information does not identify affected versions, configurations, platforms, or exploitation prerequisites. Exposure cannot be determined from this advisory alone.
2
Does the report provide remediation guidance or confirm that fixes are available?
No patch, workaround, or mitigation is provided. The report says the vulnerabilities were believed to be zero-days at the time of publication, but this is qualified as the reporter's knowledge.