Security update for gpg2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0215-1 Final 1 1 2026-01-22T12:10:17Z current 2026-01-22T12:10:17Z 2026-01-22T12:10:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for gpg2 This update for gpg2 fixes the following issues: - CVE-2025-68973: Fix possible memory corruption in the armor parser (gpg.fail/memcpy)(bsc#1255715). - Avoid potential downgrade to SHA1 in 3rd party key signatures (gpg.fail/sha1) (bsc#1256246). - Error out on unverified output for non-detached signatures (gpg.fail/detached) (bsc#1256244). - Fix a memory leak in gpg2 agent (bsc#1256243). - Fix Cleartext Signature Forgery in the NotDashEscaped header implementation in GnuPG (gpg.fail/notdash) (bsc#1256390). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP6-2026-215,Image SLES15-SP6-Azure-3P-2026-215,Image SLES15-SP6-BYOS-2026-215,Image SLES15-SP6-BYOS-Azure-2026-215,Image SLES15-SP6-BYOS-GCE-2026-215,Image SLES15-SP6-GCE-2026-215,Image SLES15-SP6-Hardened-BYOS-2026-215,Image SLES15-SP6-Hardened-BYOS-GCE-2026-215,Image SLES15-SP6-SAP-2026-215,Image SLES15-SP6-SAP-Azure-3P-2026-215,Image SLES15-SP6-SAP-GCE-2026-215,Image SLES15-SP6-SAP-Hardened-2026-215,Image SLES15-SP6-SAP-Hardened-BYOS-2026-215,Image SLES15-SP6-SAP-Hardened-BYOS-EC2-2026-215,Image SLES15-SP6-SAP-Hardened-BYOS-GCE-2026-215,Image SLES15-SP6-SAP-Hardened-EC2-2026-215,Image SLES15-SP6-SAP-Hardened-GCE-2026-215,Image SLES15-SP6-SAPCAL-2026-215,Image SLES15-SP6-SAPCAL-GCE-2026-215,Image SLES15-SP7-Azure-3P-2026-215,Image SLES15-SP7-Azure-Basic-2026-215,Image SLES15-SP7-Azure-Standard-2026-215,Image SLES15-SP7-BYOS-Azure-2026-215,Image SLES15-SP7-BYOS-EC2-2026-215,Image SLES15-SP7-BYOS-GCE-2026-215,Image SLES15-SP7-GCE-2026-215,Image SLES15-SP7-HPC-Azure-2026-215,Image SLES15-SP7-HPC-BYOS-EC2-2026-215,Image SLES15-SP7-HPC-BYOS-GCE-2026-215,Image SLES15-SP7-Hardened-BYOS-Azure-2026-215,Image SLES15-SP7-Hardened-BYOS-EC2-2026-215,Image SLES15-SP7-Hardened-BYOS-GCE-2026-215,Image SLES15-SP7-SAP-Azure-2026-215,Image SLES15-SP7-SAP-Azure-3P-2026-215,Image SLES15-SP7-SAP-EC2-2026-215,Image SLES15-SP7-SAP-Hardened-Azure-2026-215,Image SLES15-SP7-SAP-Hardened-GCE-2026-215,Image SLES15-SP7-SAPCAL-Azure-2026-215,SUSE-2026-215,SUSE-SLE-Module-Basesystem-15-SP7-2026-215,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-215,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-215,openSUSE-SLE-15.6-2026-215 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260215-1/ Link for SUSE-SU-2026:0215-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023870.html E-Mail link for SUSE-SU-2026:0215-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1255715 SUSE Bug 1255715 https://bugzilla.suse.com/1256243 SUSE Bug 1256243 https://bugzilla.suse.com/1256244 SUSE Bug 1256244 https://bugzilla.suse.com/1256246 SUSE Bug 1256246 https://bugzilla.suse.com/1256390 SUSE Bug 1256390 https://www.suse.com/security/cve/CVE-2025-68973/ SUSE CVE CVE-2025-68973 page Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAP-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE Image SLES15-SP6-SAPCAL Image SLES15-SP6-SAPCAL-GCE Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-GCE Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-Hardened-Azure Image SLES15-SP7-SAP-Hardened-GCE Image SLES15-SP7-SAPCAL-Azure SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP6 openSUSE Leap 15.6 gpg2-2.4.4-150600.3.12.1 dirmngr-2.4.4-150600.3.12.1 gpg2-lang-2.4.4-150600.3.12.1 gpg2-tpm-2.4.4-150600.3.12.1 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-Azure-3P gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-BYOS gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-BYOS-Azure gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-BYOS-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-Hardened-BYOS gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-Hardened-BYOS-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-Azure-3P gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-Hardened gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-EC2 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-Hardened-EC2 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAP-Hardened-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAPCAL gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP6-SAPCAL-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-Azure-3P gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-Azure-Basic gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-Azure-Standard gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-BYOS-Azure gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-BYOS-EC2 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-BYOS-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-HPC-Azure gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-HPC-BYOS-EC2 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-HPC-BYOS-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-Hardened-BYOS-Azure gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-Hardened-BYOS-EC2 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-Hardened-BYOS-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-SAP-Azure gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-SAP-Azure-3P gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-SAP-EC2 gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-SAP-Hardened-Azure gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-SAP-Hardened-GCE gpg2-2.4.4-150600.3.12.1 as a component of Image SLES15-SP7-SAPCAL-Azure dirmngr-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 gpg2-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 gpg2-lang-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 dirmngr-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gpg2-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gpg2-lang-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS dirmngr-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gpg2-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gpg2-lang-2.4.4-150600.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 dirmngr-2.4.4-150600.3.12.1 as a component of openSUSE Leap 15.6 gpg2-2.4.4-150600.3.12.1 as a component of openSUSE Leap 15.6 gpg2-lang-2.4.4-150600.3.12.1 as a component of openSUSE Leap 15.6 gpg2-tpm-2.4.4-150600.3.12.1 as a component of openSUSE Leap 15.6 In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.) CVE-2025-68973 Image SLES15-SP6-Azure-3P:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-BYOS-Azure:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-BYOS-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-BYOS:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-Hardened-BYOS-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-Hardened-BYOS:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-Azure-3P:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-Hardened-BYOS-EC2:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-Hardened-BYOS-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-Hardened-BYOS:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-Hardened-EC2:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-Hardened-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP-Hardened:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAP:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAPCAL-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6-SAPCAL:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP6:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-Azure-3P:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-Azure-Basic:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-Azure-Standard:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-BYOS-Azure:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-BYOS-EC2:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-BYOS-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-HPC-Azure:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-HPC-BYOS-EC2:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-HPC-BYOS-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-Hardened-BYOS-Azure:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-Hardened-BYOS-EC2:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-Hardened-BYOS-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-SAP-Azure-3P:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-SAP-Azure:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-SAP-EC2:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-SAP-Hardened-Azure:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-SAP-Hardened-GCE:gpg2-2.4.4-150600.3.12.1 Image SLES15-SP7-SAPCAL-Azure:gpg2-2.4.4-150600.3.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:dirmngr-2.4.4-150600.3.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:gpg2-2.4.4-150600.3.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:gpg2-lang-2.4.4-150600.3.12.1 SUSE Linux Enterprise Server 15 SP6-LTSS:dirmngr-2.4.4-150600.3.12.1 SUSE Linux Enterprise Server 15 SP6-LTSS:gpg2-2.4.4-150600.3.12.1 SUSE Linux Enterprise Server 15 SP6-LTSS:gpg2-lang-2.4.4-150600.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:dirmngr-2.4.4-150600.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:gpg2-2.4.4-150600.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:gpg2-lang-2.4.4-150600.3.12.1 openSUSE Leap 15.6:dirmngr-2.4.4-150600.3.12.1 openSUSE Leap 15.6:gpg2-2.4.4-150600.3.12.1 openSUSE Leap 15.6:gpg2-lang-2.4.4-150600.3.12.1 openSUSE Leap 15.6:gpg2-tpm-2.4.4-150600.3.12.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260215-1/ https://www.suse.com/security/cve/CVE-2025-68973.html CVE-2025-68973 https://bugzilla.suse.com/1255715 SUSE Bug 1255715