https://seclists.org/oss-sec/2025/q4/331: Many vulnerabilities in GnuPG
Published Dec 30, 2025
·Updated
Affected Software
3 affected components
gnupg GnuPG<2.5.14
gnupg ExtendedLTS GnuPG<2.2.51
gnupg GnuPG<2.4
Frequently Asked Questions
1
What is the severity of T7906?
The severity of T7906 is classified as serious due to it being a memory-safety error in ASCII-Armor parsing.
2
How do I fix T7906?
To fix T7906, update to GnuPG version 2.5.14 or later, released on November 19, 2025.
3
Is T7906 present in earlier versions of GnuPG?
Yes, T7906 is present in versions of GnuPG prior to the fix in version 2.5.14.
4
What kind of vulnerability is T7906?
T7906 is a memory corruption vulnerability that affects the ASCII-Armor parsing functionality.
5
Who discovered T7906?
T7906 was reported by Werner Koch, a key contributor to the GnuPG project.