CVE-2018-12020
Fixed in a distro release EPSS 8%
mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, canonical ubuntu_linux, debian_linux, gnupg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | gnupg | 2.2.8-r0 |
| Alpine 3.10 | gnupg1 | 1.4.22-r1 |
| Alpine 3.11 | gnupg | 2.2.8-r0 |
| Alpine 3.11 | gnupg1 | 1.4.22-r1 |
| Alpine 3.12 | gnupg | 2.2.8-r0 |
| Alpine 3.12 | gnupg1 | 1.4.22-r1 |
| Alpine 3.13 | gnupg | 2.2.8-r0 |
| Alpine 3.14 | gnupg | 2.2.8-r0 |
| Alpine 3.15 | gnupg | 2.2.8-r0 |
| Alpine 3.16 | gnupg | 2.2.8-r0 |
| Alpine 3.17 | gnupg | 2.2.8-r0 |
| Alpine 3.18 | gnupg | 2.2.8-r0 |
| Alpine 3.19 | gnupg | 2.2.8-r0 |
| Alpine 3.20 | gnupg | 2.2.8-r0 |
| Alpine 3.21 | gnupg | 2.2.8-r0 |
| Alpine 3.22 | gnupg | 2.2.8-r0 |
| Alpine 3.23 | gnupg | 2.2.8-r0 |
| Alpine 3.24 | gnupg | 2.2.8-r0 |
| Alpine 3.4 | gnupg | 2.1.12-r1 |
| Alpine 3.5 | gnupg | 2.1.15-r1 |
| Alpine 3.5 | gnupg1 | 1.4.22-r1 |
| Alpine 3.6 | gnupg | 2.2.3-r1 |
| Alpine 3.6 | gnupg1 | 1.4.22-r1 |
| Alpine 3.7 | gnupg | 2.2.3-r1 |
| Alpine 3.7 | gnupg1 | 1.4.22-r1 |
| Alpine 3.8 | gnupg | 2.2.8-r0 |
| Alpine 3.8 | gnupg1 | 1.4.22-r1 |
| Alpine 3.9 | gnupg | 2.2.8-r0 |
| Alpine 3.9 | gnupg1 | 1.4.22-r1 |
| Amazon Linux 2 | gnupg2 | 2.0.22-5.amzn2.0.2 |
| Amazon Linux 2 | gnupg2-smime | 2.0.22-5.amzn2.0.2 |
| Arch Linux | gnupg | 2.2.8-1 |
| Chainguard | gnupg | 0 |
| Debian 12 | gnupg1 | 1.4.22-5 |
| Debian 12 | gnupg2 | 2.2.8-1 |
| Debian 13 | gnupg1 | 1.4.22-5 |
| Debian 13 | gnupg2 | 2.2.8-1 |
| Debian 14 | gnupg1 | 1.4.22-5 |
| Debian 14 | gnupg2 | 2.2.8-1 |
| Debian 8 | gnupg | 1.4.18-7+deb8u5 |
| Debian 8 | gnupg2 | 2.0.26-6+deb8u2 |
| Debian 9 | gnupg1 | 1.4.21-4+deb9u1 |
| Debian 9 | gnupg2 | 2.1.18-8~deb9u2 |
| Debian 9 | python-gnupg | 0.3.9-1+deb9u1 |
| Red Hat Enterprise Linux 6 | gnupg2 | 0:2.0.14-9.el6_10 |
| Red Hat Enterprise Linux 6 | gnupg2-debuginfo | 0:2.0.14-9.el6_10 |
| Red Hat Enterprise Linux 6 | gnupg2-smime | 0:2.0.14-9.el6_10 |
| Red Hat Enterprise Linux 7 | gnupg2 | 0:2.0.22-5.el7_5 |
| Red Hat Enterprise Linux 7 | gnupg2-debuginfo | 0:2.0.22-5.el7_5 |
| Red Hat Enterprise Linux 7 | gnupg2-smime | 0:2.0.22-5.el7_5 |
| SUSE Enterprise Storage 4 | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | gpg2 | 2.2.5-4.3.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | gpg2 | 2.0.9-25.33.42.3.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | gpg2 | 2.0.9-25.33.42.3.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | gpg2 | 2.0.9-25.33.42.3.1 |
| SUSE Linux Enterprise Server 11 SP4 | gpg2 | 2.0.9-25.33.42.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Server 12-LTSS | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | gpg2 | 2.0.9-25.33.42.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | gpg2 | 2.0.24-9.3.1 |
| SUSE Linux Enterprise Workstation Extension 15 | enigmail | 2.0.7-3.7.2 |
| SUSE OpenStack Cloud 7 | gpg2 | 2.0.24-9.3.1 |
| Ubuntu 14.04 LTS | gnupg | 1.4.16-1ubuntu2.5 |
| Ubuntu 14.04 LTS | gnupg2 | 2.0.22-3ubuntu1.4 |
| Ubuntu 16.04 LTS | enigmail | no fix |
| Ubuntu 16.04 LTS | gnupg | 1.4.20-1ubuntu3.2 |
| Ubuntu 16.04 LTS | gnupg2 | 2.1.11-6ubuntu2.1 |
| Ubuntu 18.04 LTS | enigmail | no fix |
| Ubuntu 18.04 LTS | gnupg1 | no fix |
| Ubuntu 18.04 LTS | gnupg2 | 2.2.4-1ubuntu1.1 |
| Ubuntu 18.04 LTS | python-gnupg | 0.4.1-1ubuntu1.18.04.1 |
| Ubuntu 20.04 LTS | enigmail | no fix |
| Ubuntu 22.04 LTS | enigmail | no fix |
| Ubuntu Pro 14.04 LTS | python-gnupg | 0.3.6-1ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | python-gnupg | 0.3.8-2ubuntu0.1~esm1 |
| Wolfi | gnupg | 0 |
| openSUSE Tumbleweed | enigmail | 2.2.4-1.4 |
| openSUSE Tumbleweed | gpg2 | 2.2.27-2.4 |
| openSUSE Tumbleweed | python-python-gnupg | 0.5.6-2.1 |
| openSUSE Tumbleweed | python-python-gnupg | 0.5.2-1.5 |