Vulnerability Bulletins

DSA-4222 gnupg2 - security update

   
Affected software Debian
 
Marcus Brinkmann discovered that GnuPG performed insufficientsanitisation of file names displayed in status messages, which could beabused to fake the verification status of a signed email.

More info:

https://www.debian.org/security/2018/dsa-4222