File _patchinfo of Package patchinfo.8321
<patchinfo incident="8321">
<issue tracker="bnc" id="1096745">VUL-0: CVE-2018-12020: gpg2: Sanitize the diagnostic output of the original file name in verbose mode</issue>
<issue tracker="cve" id="2018-12020"/>
<category>security</category>
<rating>important</rating>
<packager>vitezslav_cizek</packager>
<description>This update for gpg2 fixes the following security issue:
- CVE-2018-12020: GnuPG mishandled the original filename during decryption and
verification actions, which allowed remote attackers to spoof the output that
GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2"
option (bsc#1096745)
</description>
<summary>Security update for gpg2</summary>
</patchinfo>