File _patchinfo of Package patchinfo.7706

<patchinfo incident="7706">
  <issue tracker="bnc" id="1096745">VUL-0: CVE-2018-12020: gpg2: Sanitize the diagnostic output of the original file name in     verbose mode</issue>
  <issue tracker="cve" id="2018-12020"/>
  <category>security</category>
  <rating>important</rating>
  <packager>kbabioch</packager>
  <description>This update for gpg2 fixes the following security issue:

- CVE-2018-12020: GnuPG mishandled the original filename during decryption and
  verification actions, which allowed remote attackers to spoof the output that
  GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2"
  option (bsc#1096745).
</description>
  <summary>Security update for gpg2</summary>
</patchinfo>