CVE-2022-34903
Fixed in a distro release EPSS 3%
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.
Products: gnupg, fedoraproject fedora, debian_linux, netapp active_iq_unified_manager, netapp ontap_select_deploy_administration_utility
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | gnupg2 | 2.2.20-3.el8_6 |
| AlmaLinux 8 | gnupg2-smime | 2.2.20-3.el8_6 |
| AlmaLinux 9 | gnupg2 | 2.3.3-2.el9_0 |
| AlmaLinux 9 | gnupg2-smime | 2.3.3-2.el9_0 |
| Alpine 3.13 | gnupg | 2.2.31-r1 |
| Alpine 3.14 | gnupg | 2.2.31-r1 |
| Alpine 3.15 | gnupg | 2.2.31-r2 |
| Alpine 3.16 | gnupg | 2.2.35-r4 |
| Alpine 3.17 | gnupg | 2.2.35-r4 |
| Alpine 3.18 | gnupg | 2.2.35-r4 |
| Alpine 3.19 | gnupg | 2.2.35-r4 |
| Alpine 3.20 | gnupg | 2.2.35-r4 |
| Alpine 3.21 | gnupg | 2.2.35-r4 |
| Alpine 3.22 | gnupg | 2.2.35-r4 |
| Alpine 3.23 | gnupg | 2.2.35-r4 |
| Alpine 3.24 | gnupg | 2.2.35-r4 |
| Amazon Linux 2 | gnupg2 | 2.0.22-5.amzn2.0.5 |
| Amazon Linux 2 | gnupg2-smime | 2.0.22-5.amzn2.0.5 |
| Amazon Linux 2023 | gnupg2 | 2.3.7-1.amzn2023.0.3 |
| Amazon Linux 2023 | gnupg2-minimal | 2.3.7-1.amzn2023.0.3 |
| Amazon Linux 2023 | gnupg2-smime | 2.3.7-1.amzn2023.0.3 |
| Arch Linux | gnupg | 2.2.36-1 |
| Chainguard | gnupg | 0 |
| Debian 10 | gnupg2 | 2.2.12-1+deb10u2 |
| Debian 11 | gnupg2 | 2.2.27-2+deb11u2 |
| Debian 12 | gnupg2 | 2.2.35-3 |
| Debian 13 | gnupg2 | 2.2.35-3 |
| Debian 14 | gnupg2 | 2.2.35-3 |
| Red Hat Enterprise Linux 8 | gnupg2 | 0:2.2.20-3.el8_6 |
| Red Hat Enterprise Linux 8 | gnupg2-debuginfo | 0:2.2.20-3.el8_6 |
| Red Hat Enterprise Linux 8 | gnupg2-debugsource | 0:2.2.20-3.el8_6 |
| Red Hat Enterprise Linux 8 | gnupg2-smime | 0:2.2.20-3.el8_6 |
| Red Hat Enterprise Linux 8 | gnupg2-smime-debuginfo | 0:2.2.20-3.el8_6 |
| Red Hat Enterprise Linux 9 | gnupg2 | 0:2.3.3-2.el9_0 |
| Red Hat Enterprise Linux 9 | gnupg2-debuginfo | 0:2.3.3-2.el9_0 |
| Red Hat Enterprise Linux 9 | gnupg2-debugsource | 0:2.3.3-2.el9_0 |
| Red Hat Enterprise Linux 9 | gnupg2-smime | 0:2.3.3-2.el9_0 |
| Red Hat Enterprise Linux 9 | gnupg2-smime-debuginfo | 0:2.3.3-2.el9_0 |
| Rocky Linux 8 | gnupg2 | 0:2.2.20-3.el8_6 |
| Rocky Linux 9 | gnupg2 | 0:2.3.3-2.el9_0 |
| SUSE Enterprise Storage 6 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Enterprise Storage 7 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Micro 5.1 | gpg2 | 2.2.27-150300.3.5.1 |
| SUSE Linux Enterprise Micro 5.2 | gpg2 | 2.2.27-150300.3.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | gpg2 | 2.2.27-150300.3.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | gpg2 | 2.2.27-150300.3.5.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | gpg2 | 2.0.24-9.11.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | gpg2 | 2.0.24-9.11.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | gpg2 | 2.0.24-9.11.1 |
| SUSE Linux Enterprise Server 12 SP5 | gpg2 | 2.0.24-9.11.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Server 15-LTSS | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | gpg2 | 2.0.24-9.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | gpg2 | 2.0.24-9.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Manager Proxy 4.1 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Manager Retail Branch Server 4.1 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE Manager Server 4.1 | gpg2 | 2.2.5-150000.4.22.1 |
| SUSE OpenStack Cloud 9 | gpg2 | 2.0.24-9.11.1 |
| SUSE OpenStack Cloud Crowbar 9 | gpg2 | 2.0.24-9.11.1 |
| Ubuntu 18.04 LTS | gnupg2 | 2.2.4-1ubuntu1.6 |
| Ubuntu 20.04 LTS | gnupg2 | 2.2.19-3ubuntu2.2 |
| Ubuntu 22.04 LTS | gnupg2 | 2.2.27-3ubuntu2.1 |
| Ubuntu Pro 14.04 LTS | gnupg | 1.4.16-1ubuntu2.6+esm1 |
| Ubuntu Pro 16.04 LTS | gnupg | 1.4.20-1ubuntu3.3+esm2 |
| Ubuntu Pro 16.04 LTS | gnupg2 | 2.1.11-6ubuntu2.1+esm1 |
| Wolfi | gnupg | 0 |
| openSUSE Leap 15.3 | gpg2 | 2.2.27-150300.3.5.1 |
| openSUSE Leap 15.4 | gpg2 | 2.2.27-150300.3.5.1 |
| openSUSE Leap Micro 5.2 | gpg2 | 2.2.27-150300.3.5.1 |
| openSUSE Tumbleweed | gpg2 | 2.3.7-1.1 |