{"id":"CGA-fr4x-j96g-c7gr","modified":"2026-09-07T01:35:28.446310550Z","published":"2025-10-30T21:53:24Z","upstream":["CVE-2022-34903","GHSA-356p-pg27-x2cf"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPTAR76EIZY7NQFENSOZO7U473257OVZ/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VN63GBTMRWO36Y7BKA2WQHROAKCXKCBL/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU64FUVG2PRZBSHFOQRSP7KDVEIZ23OS/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRLWJQ76A4UKHI3Q36BKSJKS4LFLQO33/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2022/dsa-5174"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20220826-0005/"},{"type":"FIX","url":"https://bugs.debian.org/1014157"},{"type":"FIX","url":"https://dev.gnupg.org/T6027"},{"type":"EVIDENCE","url":"http://www.openwall.com/lists/oss-security/2022/07/02/1"},{"type":"EVIDENCE","url":"https://www.openwall.com/lists/oss-security/2022/06/30/1"}],"affected":[{"package":{"name":"gnupg","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gnupg?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"ecosystem_specific":{"components":[{"component_location":"/.PKGINFO","component_purl":"pkg:apk/gnupg","latest_event_status":"false_positive_determination","latest_event_timestamp":"2023-01-15T00:25:50Z","component_name":"gnupg","component_version":"","component_type":"apk"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr4x-j96g-c7gr.json"}},{"package":{"name":"gnupg","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/gnupg?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"ecosystem_specific":{"components":[{"component_location":"/.PKGINFO","component_purl":"pkg:apk/gnupg","latest_event_status":"false_positive_determination","latest_event_timestamp":"2023-01-15T00:25:50Z","component_name":"gnupg","component_version":"","component_type":"apk"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr4x-j96g-c7gr.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N"}]}