Summary
[2.0.22-5]
- fix CVE-2018-12020 - missing sanitization of original filename
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gnupg2 | 0:2.0.22-5.el7_5 |
| Oracle Linux · 7 | gnupg2-smime | 0:2.0.22-5.el7_5 |
Vulnerabilities 1
-
Unscored —
mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which all…