> USN-8720-1: GnuPG vulnerability
[DATE: 03/09/2026 12:55]
[LANGUAGE: EN]
It was discovered that GnuPG incorrectly validated authentication tag
lengths when parsing CMS messages encrypted with AES-GCM. An attacker could
possibly use this issue to bypass message integrity checks.