[ubuntu/resolute-proposed] gnupg2 2.4.8-4ubuntu3 (Accepted)

[Marc Deslauriers]

gnupg2 (2.4.8-4ubuntu3) resolute; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow in tpm2daemon
    - debian/patches/CVE-2026-24882.patch: fix possible buffer overflow in
      PKDECRYPT in tpm2d/tpm2.c.
    - CVE-2026-24882

Date: Thu, 29 Jan 2026 08:57:30 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnupg2/2.4.8-4ubuntu3
-------------- next part --------------
Format: 1.8
Date: Thu, 29 Jan 2026 08:57:30 -0500
Source: gnupg2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.8-4ubuntu3
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 gnupg2 (2.4.8-4ubuntu3) resolute; urgency=medium
 .
   * SECURITY UPDATE: stack-based buffer overflow in tpm2daemon
     - debian/patches/CVE-2026-24882.patch: fix possible buffer overflow in
       PKDECRYPT in tpm2d/tpm2.c.
     - CVE-2026-24882
Checksums-Sha1:
 442437e633d0a484e88ec586742fc4d81c7eea01 4565 gnupg2_2.4.8-4ubuntu3.dsc
 5cef201cfe3c2a6405a96a2d02b4c0132f062300 122928 gnupg2_2.4.8-4ubuntu3.debian.tar.xz
 b651df3759b60aae111bc1e1f713677a3f32a97a 13714 gnupg2_2.4.8-4ubuntu3_source.buildinfo
Checksums-Sha256:
 8a6f37fcc6c0a044277d4937e8f9859e6928fcb7d2ac3369ada7b812901693bc 4565 gnupg2_2.4.8-4ubuntu3.dsc
 b6071750c3663b5d21e89fee68bab55dd00dd3bb5a3a7ad0fe468bfd6e5d5783 122928 gnupg2_2.4.8-4ubuntu3.debian.tar.xz
 6bc5deac88e95a415c5e82b2c38b0a05a6c5d77f9ead12cb51abd32c6404076b 13714 gnupg2_2.4.8-4ubuntu3_source.buildinfo
Files:
 795c6ecee1311cd62460cc591def8c9a 4565 utils optional gnupg2_2.4.8-4ubuntu3.dsc
 1e9f92001c48c8673117eb5c20a9f50f 122928 utils optional gnupg2_2.4.8-4ubuntu3.debian.tar.xz
 6f964479dae974f4e343b2556f86b57e 13714 utils optional gnupg2_2.4.8-4ubuntu3_source.buildinfo
Original-Maintainer: Debian GnuPG Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>