https://seclists.org/oss-sec/2025/q4/332: Many vulnerabilities in GnuPG
Published Dec 30, 2025
·Updated
Affected Software
1 affected component
gnupg GnuPG<2.4.9
Frequently Asked Questions
1
What are the vulnerabilities identified in GnuPG (GnuPG) on December 30, 2025?
The vulnerabilities include various security issues that could potentially affect the confidentiality, integrity, and availability of encrypted data.
2
What is the severity of GnuPG (GnuPG) vulnerabilities reported on December 30, 2025?
The severity of these vulnerabilities ranges from moderate to high, depending on the specific nature and impact of each issue.
3
How do I fix GnuPG (GnuPG) vulnerabilities published on December 30, 2025?
Users should update to GnuPG version 2.4.9 or later to mitigate the vulnerabilities.
4
Are GnuPG (GnuPG) versions 2.2 and 2.5 affected by the vulnerabilities disclosed on December 30, 2025?
Yes, GnuPG versions 2.2 and 2.5 are affected and should be updated promptly.
5
Is there a timeline for fixes for the GnuPG (GnuPG) vulnerabilities shared on December 30, 2025?
The fix for the vulnerabilities is expected to be included in the upcoming GnuPG version 2.4.9.