[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <0bf8169edb12d002a4654c4ccf6aa54d84eba14a.camel@verbuecheln.ch>
Date: Sun, 28 Dec 2025 08:30:31 +0100
From: Stephan Verbücheln <stephan@...buecheln.ch>
To: oss-security@...ts.openwall.com
Subject: Re: Many vulnerabilities in GnuPG
Most of them are about unreliably displaying what was actually signed
and vertified.
The RCE bug was actually fixed as they already state in their slides.
https://github.com/gpg/gnupg/commit/ad0c6c33c3d6fe7ff7cc8c2e73d02ead5788e5b3
The overall status is not good though. In total (in their slides):
- 1 fixed
- 1 mitigated
- 3 unreleased patches in Git
- 7 unpatched
- 2 wontfox status.
Regards
Download attachment "signature.asc" of type "application/pgp-signature" (229 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
