https://seclists.org/oss-sec/2025/q4/352: Many vulnerabilities in GnuPG
Published Dec 31, 2025
·Updated
Affected Software
1 affected component
gnupg GnuPG
Frequently Asked Questions
1
What is the severity of VULN-2025-GnuPG-01?
The severity of VULN-2025-GnuPG-01 is classified as critical due to potential exploitation risks.
2
How do I fix VULN-2025-GnuPG-02?
To fix VULN-2025-GnuPG-02, you should update to the latest GnuPG version that addresses the vulnerabilities.
3
What impact does VULN-2025-GnuPG-03 have on user data?
VULN-2025-GnuPG-03 may lead to exposure or compromise of sensitive user data if exploited.
4
Are there any known workarounds for VULN-2025-GnuPG-04?
Yes, temporarily disabling certain features may serve as a workaround for VULN-2025-GnuPG-04 until a patch is applied.
5
Is VULN-2025-GnuPG-05 related to any previous vulnerabilities?
Yes, VULN-2025-GnuPG-05 has connections to earlier GnuPG vulnerabilities that also involved key management issues.