CLSA-2026-1786609750

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786609750.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786609750
Upstream
  • CVE-2026-57062
Published
2026-08-13T08:29:20Z
Modified
2026-10-26T09:31:26Z
Summary
gnupg2: Fix of CVE-2026-57062
Details
  • CVE-2026-57062: require a minimum AES-GCM authentication tag length of 12 octets in gpgsm CMS decryption; a 4-octet aes-ICVlen was previously accepted, weakening the integrity guarantee of the message
References

Affected packages

TuxCare:AlmaLinux:9.6 / gnupg2

Package

Name
gnupg2
Purl
pkg:rpm/tuxcare/gnupg2?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.3.3-4.el9_6.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786609750.json"

TuxCare:AlmaLinux:9.6 / gnupg2-smime

Package

Name
gnupg2-smime
Purl
pkg:rpm/tuxcare/gnupg2-smime?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.3.3-4.el9_6.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1786609750.json"