# CVE-2022-34903: gpgv2: GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's key...

CVE-2022-34903 is fixed in 23 products on 1 platform, first by dirmngr 2.2.4-1ubuntu1.6, released July 1, 2022. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-34903
- Priority: Routine
- CVSS: 6.5 (Medium)
- EPSS: 0.0284
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 1, 2022

## Description

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dirmngr Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [dirmngr 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-dirmngr-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | dirmngr Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [dirmngr 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-dirmngr-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | dirmngr Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [dirmngr 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dirmngr-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gnupg Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gnupg 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gnupg-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gnupg Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gnupg 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gnupg-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gnupg Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gnupg 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gnupg-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gnupg-agent Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gnupg-agent 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gnupg-agent-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gnupg-agent Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gnupg-agent 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gnupg-agent-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gnupg-agent Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gnupg-agent 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gnupg-agent-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gnupg-l10n Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gnupg-l10n 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gnupg-l10n-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gnupg-l10n Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gnupg-l10n 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gnupg-l10n-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gnupg-l10n Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gnupg-l10n 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gnupg-l10n-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gnupg-utils Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gnupg-utils 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gnupg-utils-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gnupg-utils Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gnupg-utils 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gnupg-utils-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gnupg-utils Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gnupg-utils 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gnupg-utils-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gnupg2 Debian 11.6 (bullseye) | 2.2.27-2+deb11u2 | [DSA-5174-1](https://patchblox.com/security/data/fix/linux/dsa-5174-1.md) | Jul 3, 2022 |
| Linux | gnupg2 Debian 12.15 (bookworm) | 2.2.35-3 | [DEBIAN-CVE-2022-34903](https://patchblox.com/security/data/fix/linux/debian-cve-2022-34903.md) | Jul 1, 2022 |
| Linux | gnupg2 Debian 13.5 (trixie) | 2.2.35-3 | [DEBIAN-CVE-2022-34903](https://patchblox.com/security/data/fix/linux/debian-cve-2022-34903.md) | Jul 1, 2022 |
| Linux | gnupg2 Debian 14 | 2.2.35-3 | [DEBIAN-CVE-2022-34903](https://patchblox.com/security/data/fix/linux/debian-cve-2022-34903.md) | Jul 1, 2022 |
| Linux | gnupg2 RHEL 8 | 0:2.2.20-3.el8_6 | [RHSA-2022:6463](https://patchblox.com/security/data/fix/linux/rhsa-2022-6463.md) | Sep 13, 2022 |
| Linux | gnupg2 RHEL 9 | 0:2.3.3-2.el9_0 | [RHSA-2022:6602](https://patchblox.com/security/data/fix/linux/rhsa-2022-6602.md) | Sep 20, 2022 |
| Linux | gnupg2 Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gnupg2 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gnupg2-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gnupg2 Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gnupg2 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gnupg2-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gnupg2 Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gnupg2 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gnupg2-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gnupg2 almalinux 8 | 2.2.20-3.el8_6 | [ALSA-2022:6463](https://patchblox.com/security/data/fix/linux/alsa-2022-6463.md) | Sep 13, 2022 |
| Linux | gnupg2 almalinux 9 | 2.3.3-2.el9_0 | [ALSA-2022:6602](https://patchblox.com/security/data/fix/linux/alsa-2022-6602.md) | Sep 20, 2022 |
| Linux | gnupg2 amzn 2023 | 2.3.7-1.amzn2023.0.3 | [ALAS2023-2023-087](https://patchblox.com/security/data/fix/linux/alas2023-2023-087.md) | Feb 17, 2023 |
| Linux | gnupg2 ol 8 | 0:2.2.20-3.el8_6 | [ELSA-2022-6463](https://patchblox.com/security/data/fix/linux/elsa-2022-6463.md) | Sep 14, 2022 |
| Linux | gnupg2 ol 9 | 0:2.3.3-2.el9_0 | [ELSA-2022-6602](https://patchblox.com/security/data/fix/linux/elsa-2022-6602.md) | Sep 21, 2022 |
| Linux | gnupg2 rocky 8 | 0:2.2.20-3.el8_6 | [RLSA-2022:6463](https://patchblox.com/security/data/fix/linux/rlsa-2022-6463.md) | Sep 13, 2022 |
| Linux | gnupg2 rocky 9 | 0:2.3.3-2.el9_0 | [RLSA-2022:6602](https://patchblox.com/security/data/fix/linux/rlsa-2022-6602.md) | Sep 20, 2022 |
| Linux | gnupg2-debuginfo amzn 2023 | 2.3.7-1.amzn2023.0.3 | [ALAS2023-2023-087](https://patchblox.com/security/data/fix/linux/alas2023-2023-087.md) | Feb 17, 2023 |
| Linux | gnupg2-debugsource amzn 2023 | 2.3.7-1.amzn2023.0.3 | [ALAS2023-2023-087](https://patchblox.com/security/data/fix/linux/alas2023-2023-087.md) | Feb 17, 2023 |
| Linux | gnupg2-minimal amzn 2023 | 2.3.7-1.amzn2023.0.3 | [ALAS2023-2023-087](https://patchblox.com/security/data/fix/linux/alas2023-2023-087.md) | Feb 17, 2023 |
| Linux | gnupg2-minimal-debuginfo amzn 2023 | 2.3.7-1.amzn2023.0.3 | [ALAS2023-2023-087](https://patchblox.com/security/data/fix/linux/alas2023-2023-087.md) | Feb 17, 2023 |
| Linux | gnupg2-smime RHEL 8 | 0:2.2.20-3.el8_6 | [RHSA-2022:6463](https://patchblox.com/security/data/fix/linux/rhsa-2022-6463.md) | Sep 13, 2022 |
| Linux | gnupg2-smime RHEL 9 | 0:2.3.3-2.el9_0 | [RHSA-2022:6602](https://patchblox.com/security/data/fix/linux/rhsa-2022-6602.md) | Sep 20, 2022 |
| Linux | gnupg2-smime almalinux 8 | 2.2.20-3.el8_6 | [ALSA-2022:6463](https://patchblox.com/security/data/fix/linux/alsa-2022-6463.md) | Sep 13, 2022 |
| Linux | gnupg2-smime almalinux 9 | 2.3.3-2.el9_0 | [ALSA-2022:6602](https://patchblox.com/security/data/fix/linux/alsa-2022-6602.md) | Sep 20, 2022 |
| Linux | gnupg2-smime amzn 2023 | 2.3.7-1.amzn2023.0.3 | [ALAS2023-2023-087](https://patchblox.com/security/data/fix/linux/alas2023-2023-087.md) | Feb 17, 2023 |
| Linux | gnupg2-smime ol 8 | 0:2.2.20-3.el8_6 | [ELSA-2022-6463](https://patchblox.com/security/data/fix/linux/elsa-2022-6463.md) | Sep 14, 2022 |
| Linux | gnupg2-smime ol 9 | 0:2.3.3-2.el9_0 | [ELSA-2022-6602](https://patchblox.com/security/data/fix/linux/elsa-2022-6602.md) | Sep 21, 2022 |
| Linux | gnupg2-smime-debuginfo amzn 2023 | 2.3.7-1.amzn2023.0.3 | [ALAS2023-2023-087](https://patchblox.com/security/data/fix/linux/alas2023-2023-087.md) | Feb 17, 2023 |
| Linux | gpg Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpg 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpg-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpg Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpg 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpg-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpg Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpg 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpg-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpg-agent Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpg-agent 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpg-agent-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpg-agent Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpg-agent 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpg-agent-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpg-agent Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpg-agent 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpg-agent-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpg-wks-client Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpg-wks-client 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpg-wks-client-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpg-wks-client Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpg-wks-client 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpg-wks-client-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpg-wks-client Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpg-wks-client 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpg-wks-client-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpg-wks-server Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpg-wks-server 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpg-wks-server-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpg-wks-server Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpg-wks-server 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpg-wks-server-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpg-wks-server Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpg-wks-server 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpg-wks-server-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpgconf Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpgconf 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpgconf-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpgconf Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpgconf 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpgconf-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpgconf Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpgconf 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpgconf-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpgsm Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpgsm 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpgsm-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpgsm Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpgsm 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpgsm-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpgsm Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpgsm 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpgsm-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpgv Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpgv 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpgv-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpgv Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpgv 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpgv-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpgv Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpgv 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpgv-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpgv-static Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpgv-static 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpgv-static-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpgv-static Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpgv-static 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpgv-static-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpgv-static Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpgv-static 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpgv-static-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpgv-win32 Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpgv-win32 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpgv-win32-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpgv-win32 Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpgv-win32 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpgv-win32-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpgv-win32 Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpgv-win32 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpgv-win32-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | gpgv2 Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [gpgv2 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gpgv2-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | gpgv2 Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [gpgv2 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gpgv2-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | gpgv2 Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [gpgv2 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gpgv2-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |
| Linux | scdaemon Ubuntu 18.04.6 LTS (bionic) | 2.2.4-1ubuntu1.6 | [scdaemon 2.2.4-1ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-scdaemon-2.2.4-1ubuntu1.6.md) | Jul 1, 2022 |
| Linux | scdaemon Ubuntu 20.04 LTS (focal) | 2.2.19-3ubuntu2.2 | [scdaemon 2.2.19-3ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-scdaemon-2.2.19-3ubuntu2.2.md) | Jul 1, 2022 |
| Linux | scdaemon Ubuntu 22.04.1 LTS (jammy) | 2.2.27-3ubuntu2.1 | [scdaemon 2.2.27-3ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-scdaemon-2.2.27-3ubuntu2.1.md) | Jul 1, 2022 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.