The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0719 advisory.

    The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures,     compliant with OpenPGP and S/MIME standards.

    Security Fix(es):

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20029-1 advisory.

    - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead     to memory corruption (bsc#1255715).

    Other security fixes:

    - gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures (bsc#1256246).
    - gpg: Error out on unverified output for non-detached signatures (bsc#1256244).
    - gpg: Deprecate the option --not-dash-escaped (bsc#1256390).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0697 advisory.

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-043:01 advisory.

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0935 advisory.

    The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures,     compliant with OpenPGP and S/MIME standards.

    Security Fix(es):

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1014 advisory.

    The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures,     compliant with OpenPGP and S/MIME standards.

    Security Fix(es):

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0013 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-68973:
    In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is     intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are     fixed versions.)

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the gnupg package has been released.

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is     intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are     fixed versions.)(CVE-2025-68973)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization gnupg2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
287946	RHEL 9 : gnupg2 (RHSA-2026:0719)	Nessus	Red Hat Local Security Checks	2026/1/15	2026/1/30	high
287967	openSUSE 16 Security Update : gpg2 (openSUSE-SU-2026:20029-1)	Nessus	SuSE Local Security Checks	2026/1/16	2026/1/30	high
291286	RockyLinux 10 : gnupg2 (RLSA-2026:0697)	Nessus	Rocky Linux Local Security Checks	2026/1/17	2026/1/30	high
293782	MiracleLinux 9 : gnupg2-2.3.3-5.el9_7 (AXSA:2026-043:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/30	high
294886	RHEL 8 : gnupg2 (RHSA-2026:0935)	Nessus	Red Hat Local Security Checks	2026/1/21	2026/1/30	high
294992	RHEL 8 : gnupg2 (RHSA-2026:1014)	Nessus	Red Hat Local Security Checks	2026/1/22	2026/1/30	high
296589	Alibaba Cloud Linux 3 : 0013: gnupg2 (ALINUX3-SA-2026:0013)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/1/26	2026/1/30	high
297239	Photon OS 4.0: Gnupg PHSA-2026-4.0-0946	Nessus	PhotonOS Local Security Checks	2026/1/30	2026/1/30	high
302626	EulerOS Virtualization 2.10.0 : gnupg2 (EulerOS-SA-2026-1554)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	high
302645	EulerOS Virtualization 2.10.1 : gnupg2 (EulerOS-SA-2026-1534)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high