{
  "cveId": "CVE-2019-6690",
  "url": "https://patchblox.com/security/cve/CVE-2019-6690",
  "summary": "CVE-2019-6690 is fixed in 2 products on 1 platform, first by python-gnupg 0.4.1-1ubuntu1.18.04.1, released March 20, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "python3-gnupg: python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended",
  "description": "python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a \u0022CWE-20: Improper Input Validation\u0022 issue affecting the affect functionality component.",
  "published": "2019-03-20T17:00:00Z",
  "severity": "Medium",
  "epss": 0.08617,
  "epssPercentile": 0.95127,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "python-gnupg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "0.4.1-1ubuntu1.18.04.1",
      "fix": "python-gnupg 0.4.1-1ubuntu1.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-gnupg-0.4.1-1ubuntu1.18.04.1",
      "released": "2019-03-20T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-gnupg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "0.4.1-1ubuntu1.18.04.1",
      "fix": "python3-gnupg 0.4.1-1ubuntu1.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-gnupg-0.4.1-1ubuntu1.18.04.1",
      "released": "2019-03-20T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}