[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <aVKT-72EaOkbvDNM@argenau.bebt.de>
Date: Mon, 29 Dec 2025 15:45:15 +0100
From: Andreas Metzler <ametzler@...t.de>
To: oss-security@...ts.openwall.com
Subject: Re: Many vulnerabilities in GnuPG
Stephan Verbücheln <stephan@...buecheln.ch> wrote:
> The RCE bug was actually fixed as they already state in their slides.
> https://github.com/gpg/gnupg/commit/ad0c6c33c3d6fe7ff7cc8c2e73d02ead5788e5b3
This commit seems to be related to #3 https://gpg.fail/filename while
the RCE is #5 https://gpg.fail/memcpy aka CVE-2025-68973, isn't it?
cu Andreas
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
