openSUSE Leap 16.0 gpg2 Low CMS Parsing Issue 2026-21385

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This update for gpg2 fixes the following issue:

- CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM (bsc#1269279).

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-Leap-16.0-1288=1

- openSUSE Leap 16.0:

dirmngr-2.5.5-160000.6.1

gpg2-2.5.5-160000.6.1

gpg2-lang-2.5.5-160000.6.1

gpg2-tpm-2.5.5-160000.6.1

*

Get the latest Linux and open source security news straight to your inbox.