vulnerability
Ubuntu: (Multiple Advisories) (CVE-2019-6690): python-gnupg vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Feb 7, 2019 | May 4, 2019 | Apr 16, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Feb 7, 2019
Added
May 4, 2019
Modified
Apr 16, 2026
Description
python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component.
Solutions
ubuntu-pro-upgrade-python-gnupgubuntu-pro-upgrade-python3-gnupgubuntu-upgrade-python-gnupgubuntu-upgrade-python3-gnupg
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.