UbuntuUpdates.org

Package "gnupg"

Name: gnupg

Description:

GNU privacy guard - a free PGP replacement
Latest version: 2.4.4-2ubuntu23.1
Release: plucky (25.04)
Level: security
Repository: main
Head package: gnupg2
Homepage: https://www.gnupg.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gnupg"

All arch deb package
APT INSTALL

Other versions of "gnupg" in Plucky

Repository Area Version
base main 2.4.4-2ubuntu23
updates main 2.4.4-2ubuntu23.1

Changelog

Version: 2.4.4-2ubuntu23.1 2025-07-08 23:18:59 UTC

  gnupg2 (2.4.4-2ubuntu23.1) plucky-security; urgency=medium

  * debian/patches/fix-key-validity-regression-due-to-CVE-2025-
    30258.patch:
    - Fix a key validity regression following patches for CVE-2025-30258,
      causing trusted "certify-only" primary keys to be ignored when checking
      signature on user IDs and computing key validity. This regression makes
      imported keys signed by a trusted "certify-only" key have an unknown
      validity (LP: #2114775).

 -- dcpi <dcpi@u22vm> Thu, 26 Jun 2025 18:13:59 +0000
2114775 Key validity not computed when key is certified by a trusted \
CVE-2025-30258 In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect us


About   -   Send Feedback to @ubuntu_updates