oss-sec mailing list archives

Many vulnerabilities in GnuPG

From: Demi Marie Obenour <demiobenour () gmail com>
Date: Sat, 27 Dec 2025 19:29:53 -0500

https://gpg.fail lists many vulnerabilities in GnuPG, one of which
allows remote code execution.  All are zero-days to the best of
my knowledge.
-- 
Sincerely,
Demi Marie Obenour (she/her/hers)

Attachment: OpenPGP_0xB288B55FFF9C22C1.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Current thread:

Many vulnerabilities in GnuPG Demi Marie Obenour (Dec 27)
- Re: Many vulnerabilities in GnuPG Solar Designer (Dec 27)
  - Re: Many vulnerabilities in GnuPG Solar Designer (Dec 27)
  - Re: Many vulnerabilities in GnuPG Jacob Bachmeyer (Dec 27)
    - Re: Many vulnerabilities in GnuPG Salvatore Bonaccorso (Dec 28)
    - Re: Many vulnerabilities in GnuPG Werner Koch (Dec 29)
    - Re: Many vulnerabilities in GnuPG Demi Marie Obenour (Dec 29)
    - Re: safe use of cleartext signatures? (was: Many vulnerabilities in GnuPG) Jacob Bachmeyer (Dec 30)
    - Re: safe use of cleartext signatures? Werner Koch (Dec 30)
    - Re: safe use of cleartext signatures? Demi Marie Obenour (Dec 30)
    - Re: safe use of cleartext signatures? Werner Koch (Dec 31)

(Thread continues...)