[CLSA-2026:1780512159] gnupg2: Fix of CVE-2022-3219
Type:
security
Severity:
Low
Release date:
2026-06-03 18:42:54 UTC
Description:
- CVE-2022-3219: reject compressed key packets on import to fix a denial of service from crafted compressed public keys (adds --compatibility-flags compr-keys escape hatch)
CVEs fixed:
Updated packages:
  • gnupg2-2.3.3-4.el9_6.tuxcare.els4.x86_64.rpm
    sha:05325aca345b1511cb9f905c4fa0f41c6bdbcecbca3464b0c0543eb35898712a
  • gnupg2-smime-2.3.3-4.el9_6.tuxcare.els4.x86_64.rpm
    sha:ecd1012200a2822e48df6ee5117ffd922f841ebac884d496cd5c6896af27a4b9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.