CVE-2025-30258

gpgconf: In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid...

CVE-2025-30258 is fixed in 25 products on 1 platform, first by dirmngr 2.2.4-1ubuntu1.6+esm1, released March 19, 2025. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
4.7
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0019
9th percentile

In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."

Where it's fixed

ProductFixed inFixReleased
Linux
dirmngr · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 dirmngr 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
dirmngr · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 dirmngr 2.2.19-3ubuntu2.4 Mar 19, 2025
dirmngr · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 dirmngr 2.2.27-3ubuntu2.3 Mar 19, 2025
dirmngr · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 dirmngr 2.4.4-2ubuntu17.2 Mar 19, 2025
dirmngr · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 dirmngr 2.4.4-2ubuntu18.2 Jan 16, 2026
dirmngr · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 dirmngr 2.4.4-2ubuntu23 Jan 16, 2026
dirmngr · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 dirmngr 2.4.4-2ubuntu23 Mar 19, 2025
gnupg · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gnupg 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gnupg · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gnupg 2.2.19-3ubuntu2.4 Mar 19, 2025
gnupg · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gnupg 2.2.27-3ubuntu2.3 Mar 19, 2025
gnupg · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gnupg 2.4.4-2ubuntu17.2 Mar 19, 2025
gnupg · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gnupg 2.4.4-2ubuntu18.2 Jan 16, 2026
gnupg · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gnupg 2.4.4-2ubuntu23 Jan 16, 2026
gnupg · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gnupg 2.4.4-2ubuntu23 Mar 19, 2025
gnupg-agent · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gnupg-agent 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gnupg-agent · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gnupg-agent 2.2.19-3ubuntu2.4 Mar 19, 2025
gnupg-agent · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gnupg-agent 2.2.27-3ubuntu2.3 Mar 19, 2025
gnupg-agent · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gnupg-agent 2.4.4-2ubuntu17.2 Mar 19, 2025
gnupg-agent · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gnupg-agent 2.4.4-2ubuntu18.2 Jan 16, 2026
gnupg-agent · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gnupg-agent 2.4.4-2ubuntu23 Jan 16, 2026
gnupg-agent · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gnupg-agent 2.4.4-2ubuntu23 Mar 19, 2025
gnupg-l10n · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gnupg-l10n 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gnupg-l10n · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gnupg-l10n 2.2.19-3ubuntu2.4 Mar 19, 2025
gnupg-l10n · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gnupg-l10n 2.2.27-3ubuntu2.3 Mar 19, 2025
gnupg-l10n · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gnupg-l10n 2.4.4-2ubuntu17.2 Mar 19, 2025
gnupg-l10n · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gnupg-l10n 2.4.4-2ubuntu18.2 Jan 16, 2026
gnupg-l10n · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gnupg-l10n 2.4.4-2ubuntu23 Jan 16, 2026
gnupg-l10n · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gnupg-l10n 2.4.4-2ubuntu23 Mar 19, 2025
gnupg-utils · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gnupg-utils 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gnupg-utils · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gnupg-utils 2.2.19-3ubuntu2.4 Mar 19, 2025
gnupg-utils · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gnupg-utils 2.2.27-3ubuntu2.3 Mar 19, 2025
gnupg-utils · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gnupg-utils 2.4.4-2ubuntu17.2 Mar 19, 2025
gnupg-utils · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gnupg-utils 2.4.4-2ubuntu18.2 Jan 16, 2026
gnupg-utils · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gnupg-utils 2.4.4-2ubuntu23 Jan 16, 2026
gnupg-utils · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gnupg-utils 2.4.4-2ubuntu23 Mar 19, 2025
gnupg2 · Debian 13.5 (trixie) 2.2.46-5 DEBIAN-CVE-2025-30258 Mar 19, 2025
gnupg2 · Debian 14 2.2.46-5 DEBIAN-CVE-2025-30258 Mar 19, 2025
gnupg2 · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gnupg2 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gnupg2 · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gnupg2 2.2.19-3ubuntu2.4 Mar 19, 2025
gnupg2 · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gnupg2 2.2.27-3ubuntu2.3 Mar 19, 2025
gnupg2 · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gnupg2 2.4.4-2ubuntu17.2 Mar 19, 2025
gnupg2 · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gnupg2 2.4.4-2ubuntu18.2 Jan 16, 2026
gnupg2 · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gnupg2 2.4.4-2ubuntu23 Jan 16, 2026
gnupg2 · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gnupg2 2.4.4-2ubuntu23 Mar 19, 2025
gnupg2 · amzn 2023 2.3.7-1.amzn2023.0.5 ALAS2023-2025-1107 Jul 21, 2025
gnupg2-debuginfo · amzn 2023 2.3.7-1.amzn2023.0.5 ALAS2023-2025-1107 Jul 21, 2025
gnupg2-debugsource · amzn 2023 2.3.7-1.amzn2023.0.5 ALAS2023-2025-1107 Jul 21, 2025
gnupg2-minimal · amzn 2023 2.3.7-1.amzn2023.0.5 ALAS2023-2025-1107 Jul 21, 2025
gnupg2-minimal-debuginfo · amzn 2023 2.3.7-1.amzn2023.0.5 ALAS2023-2025-1107 Jul 21, 2025
gnupg2-smime · amzn 2023 2.3.7-1.amzn2023.0.5 ALAS2023-2025-1107 Jul 21, 2025
gnupg2-smime-debuginfo · amzn 2023 2.3.7-1.amzn2023.0.5 ALAS2023-2025-1107 Jul 21, 2025
gpg · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpg 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpg · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpg 2.2.19-3ubuntu2.4 Mar 19, 2025
gpg · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpg 2.2.27-3ubuntu2.3 Mar 19, 2025
gpg · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpg 2.4.4-2ubuntu17.2 Mar 19, 2025
gpg · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpg 2.4.4-2ubuntu18.2 Jan 16, 2026
gpg · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpg 2.4.4-2ubuntu23 Jan 16, 2026
gpg · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpg 2.4.4-2ubuntu23 Mar 19, 2025
gpg-agent · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpg-agent 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpg-agent · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpg-agent 2.2.19-3ubuntu2.4 Mar 19, 2025
gpg-agent · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpg-agent 2.2.27-3ubuntu2.3 Mar 19, 2025
gpg-agent · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpg-agent 2.4.4-2ubuntu17.2 Mar 19, 2025
gpg-agent · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpg-agent 2.4.4-2ubuntu18.2 Jan 16, 2026
gpg-agent · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpg-agent 2.4.4-2ubuntu23 Jan 16, 2026
gpg-agent · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpg-agent 2.4.4-2ubuntu23 Mar 19, 2025
gpg-wks-client · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpg-wks-client 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpg-wks-client · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpg-wks-client 2.2.19-3ubuntu2.4 Mar 19, 2025
gpg-wks-client · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpg-wks-client 2.2.27-3ubuntu2.3 Mar 19, 2025
gpg-wks-client · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpg-wks-client 2.4.4-2ubuntu17.2 Mar 19, 2025
gpg-wks-client · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpg-wks-client 2.4.4-2ubuntu18.2 Jan 16, 2026
gpg-wks-client · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpg-wks-client 2.4.4-2ubuntu23 Jan 16, 2026
gpg-wks-client · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpg-wks-client 2.4.4-2ubuntu23 Mar 19, 2025
gpg-wks-server · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpg-wks-server 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpg-wks-server · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpg-wks-server 2.2.19-3ubuntu2.4 Mar 19, 2025
gpg-wks-server · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpg-wks-server 2.2.27-3ubuntu2.3 Mar 19, 2025
gpg-wks-server · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpg-wks-server 2.4.4-2ubuntu17.2 Mar 19, 2025
gpg-wks-server · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpg-wks-server 2.4.4-2ubuntu18.2 Jan 16, 2026
gpg-wks-server · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpg-wks-server 2.4.4-2ubuntu23 Jan 16, 2026
gpg-wks-server · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpg-wks-server 2.4.4-2ubuntu23 Mar 19, 2025
gpg2 · opensuse-leap 15.6 2.4.4-150600.3.9.1 SUSE-SU-2025:02259-1 Jul 9, 2025
gpg2 · sles 15.6 2.4.4-150600.3.9.1 SUSE-SU-2025:02259-1 Jul 9, 2025
gpg2 · sles 15.7 2.4.4-150600.3.9.1 SUSE-SU-2025:02259-1 Jul 9, 2025
gpgconf · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpgconf 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpgconf · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpgconf 2.2.19-3ubuntu2.4 Mar 19, 2025
gpgconf · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpgconf 2.2.27-3ubuntu2.3 Mar 19, 2025
gpgconf · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpgconf 2.4.4-2ubuntu17.2 Mar 19, 2025
gpgconf · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpgconf 2.4.4-2ubuntu18.2 Jan 16, 2026
gpgconf · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpgconf 2.4.4-2ubuntu23 Jan 16, 2026
gpgconf · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpgconf 2.4.4-2ubuntu23 Mar 19, 2025
gpgsm · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpgsm 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpgsm · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpgsm 2.2.19-3ubuntu2.4 Mar 19, 2025
gpgsm · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpgsm 2.2.27-3ubuntu2.3 Mar 19, 2025
gpgsm · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpgsm 2.4.4-2ubuntu17.2 Mar 19, 2025
gpgsm · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpgsm 2.4.4-2ubuntu18.2 Jan 16, 2026
gpgsm · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpgsm 2.4.4-2ubuntu23 Jan 16, 2026
gpgsm · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpgsm 2.4.4-2ubuntu23 Mar 19, 2025
gpgv · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpgv 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpgv · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpgv 2.2.19-3ubuntu2.4 Mar 19, 2025
gpgv · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpgv 2.2.27-3ubuntu2.3 Mar 19, 2025
gpgv · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpgv 2.4.4-2ubuntu17.2 Mar 19, 2025
gpgv · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpgv 2.4.4-2ubuntu18.2 Jan 16, 2026
gpgv · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpgv 2.4.4-2ubuntu23 Jan 16, 2026
gpgv · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpgv 2.4.4-2ubuntu23 Mar 19, 2025
gpgv-static · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpgv-static 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpgv-static · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpgv-static 2.2.19-3ubuntu2.4 Mar 19, 2025
gpgv-static · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpgv-static 2.2.27-3ubuntu2.3 Mar 19, 2025
gpgv-static · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpgv-static 2.4.4-2ubuntu17.2 Mar 19, 2025
gpgv-static · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpgv-static 2.4.4-2ubuntu18.2 Jan 16, 2026
gpgv-static · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 gpgv-static 2.4.4-2ubuntu23 Jan 16, 2026
gpgv-static · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 gpgv-static 2.4.4-2ubuntu23 Mar 19, 2025
gpgv-win32 · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpgv-win32 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpgv-win32 · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpgv-win32 2.2.19-3ubuntu2.4 Mar 19, 2025
gpgv-win32 · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpgv-win32 2.2.27-3ubuntu2.3 Mar 19, 2025
gpgv-win32 · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 gpgv-win32 2.4.4-2ubuntu17.2 Mar 19, 2025
gpgv-win32 · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 gpgv-win32 2.4.4-2ubuntu18.2 Jan 16, 2026
gpgv2 · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 gpgv2 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
gpgv2 · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 gpgv2 2.2.19-3ubuntu2.4 Mar 19, 2025
gpgv2 · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 gpgv2 2.2.27-3ubuntu2.3 Mar 19, 2025
keyboxd · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 keyboxd 2.4.4-2ubuntu17.2 Mar 19, 2025
keyboxd · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 keyboxd 2.4.4-2ubuntu18.2 Jan 16, 2026
keyboxd · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 keyboxd 2.4.4-2ubuntu23 Jan 16, 2026
keyboxd · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 keyboxd 2.4.4-2ubuntu23 Mar 19, 2025
scdaemon · Ubuntu 18.04.6 LTS (bionic) 2.2.4-1ubuntu1.6+esm1 scdaemon 2.2.4-1ubuntu1.6+esm1 Mar 19, 2025
scdaemon · Ubuntu 20.04 LTS (focal) 2.2.19-3ubuntu2.4 scdaemon 2.2.19-3ubuntu2.4 Mar 19, 2025
scdaemon · Ubuntu 22.04.1 LTS (jammy) 2.2.27-3ubuntu2.3 scdaemon 2.2.27-3ubuntu2.3 Mar 19, 2025
scdaemon · Ubuntu 24.04.5 LTS (noble) 2.4.4-2ubuntu17.2 scdaemon 2.4.4-2ubuntu17.2 Mar 19, 2025
scdaemon · Ubuntu 24.10 (oracular) 2.4.4-2ubuntu18.2 scdaemon 2.4.4-2ubuntu18.2 Jan 16, 2026
scdaemon · Ubuntu 25.04 (plucky) 2.4.4-2ubuntu23 scdaemon 2.4.4-2ubuntu23 Jan 16, 2026
scdaemon · Ubuntu 25.10 (questing) 2.4.4-2ubuntu23 scdaemon 2.4.4-2ubuntu23 Mar 19, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.