UbuntuUpdates.org

Package "gpgv2"

Name: gpgv2

Description:

GNU privacy guard - signature verification tool (dummy transitional package)
Latest version: 2.2.19-3ubuntu2.2
Release: focal (20.04)
Level: security
Repository: universe
Head package: gnupg2
Homepage: https://www.gnupg.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gpgv2"

All arch deb package
APT INSTALL

Other versions of "gpgv2" in Focal

Repository Area Version
base universe 2.2.19-3ubuntu2
updates universe 2.2.19-3ubuntu2.2

Changelog

Version: 2.2.19-3ubuntu2.2 2022-07-05 21:46:11 UTC

  gnupg2 (2.2.19-3ubuntu2.2) focal-security; urgency=medium

  * SECURITY UPDATE: signature forgery via injection into the status line
    - debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
      NOTATION_DATA in g10/cpr.c.
    - CVE-2022-34903

 -- Marc Deslauriers <email address hidden> Mon, 04 Jul 2022 12:20:36 -0400
CVE-2022-34903 GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g.


About   -   Send Feedback to @ubuntu_updates