Debian/gnupg2: medium 6.5
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery v
Action: Upgrade gnupg2 to 2.2.35-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.35-3 | - |
Fixed versions
| 2.2.35-3 |
Sources
published · modified · JSON