Alpine/gnupg: medium 6.5
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery v
Action: Upgrade gnupg to 2.2.31-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.31-r1 | - |
Fixed versions
| 2.2.31-r1 |
Sources
published · modified · JSON