GCVE-110-MAGEIA-2018-254

Advisory Published

Vulnetix · Advisory published May 24, 2018

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey. (CVE-2018-9234)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	gnupg2	0 (affected), 2.1.21-3.mga6 (unaffected)	—
Mageia	gnupg2	0 (affected), 2.0.27-1.1.mga5 (unaffected)	—

References

Updated gnupg2 packages fix security vulnerability

advisory

Updated gnupg2 packages fix security vulnerability

issue

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON