https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T04:41:30.286422+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-30258 CVE-2025-30258 2026-10-09T04:41:35.888124+00:00

Affected: GnuPG

In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."

 https://vulnerability.circl.lu/vuln/usn-7412-1 USN-7412-1 — gnupg2 vulnerability 2026-10-09T04:41:35.888333+00:00

Affected: Ubuntu:20.04:LTS: gnupg2, Ubuntu:22.04:LTS: gnupg2, Ubuntu:24.04:LTS: gnupg2

It was discovered that GnuPG incorrectly handled importing keys with certain crafted subkey data. If a user or automated system were tricked into importing a specially crafted key, a remote attacker may prevent users from importing other keys in the future.