[ubuntu/kinetic-proposed] gnupg2 2.2.27-3ubuntu3 (Accepted)

[Marc Deslauriers]

gnupg2 (2.2.27-3ubuntu3) kinetic; urgency=medium

  * SECURITY UPDATE: signature forgery via injection into the status line
    - debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
      NOTATION_DATA in g10/cpr.c.
    - CVE-2022-34903

Date: Mon, 04 Jul 2022 12:17:43 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/gnupg2/2.2.27-3ubuntu3
-------------- next part --------------
Format: 1.8
Date: Mon, 04 Jul 2022 12:17:43 -0400
Source: gnupg2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.2.27-3ubuntu3
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 gnupg2 (2.2.27-3ubuntu3) kinetic; urgency=medium
 .
   * SECURITY UPDATE: signature forgery via injection into the status line
     - debian/patches/CVE-2022-34903.patch: Fix garbled status messages in
       NOTATION_DATA in g10/cpr.c.
     - CVE-2022-34903
Checksums-Sha1:
 d1d808798246ff77b349669aba8b7cad5d34fddf 3718 gnupg2_2.2.27-3ubuntu3.dsc
 c0e2a05ba5b7ac8a975942a3a525c7b5168d3950 66660 gnupg2_2.2.27-3ubuntu3.debian.tar.xz
 2b8bf22ff230a7c2409622eaa9cbcc40754988d7 10454 gnupg2_2.2.27-3ubuntu3_source.buildinfo
Checksums-Sha256:
 6e33be6afe0084c967fa8fdfd921f70ef72c8ea69fd4f4e9d1420275c7909a0d 3718 gnupg2_2.2.27-3ubuntu3.dsc
 ed6cb1dd36cb2e679f0effc5df66b9bc5dde5dc2d5fa3a81cfa93d4b314b74cc 66660 gnupg2_2.2.27-3ubuntu3.debian.tar.xz
 9400dc2e56dd4bd33d4eac576b21b78d58993f724cd866783bc41cfae043becf 10454 gnupg2_2.2.27-3ubuntu3_source.buildinfo
Files:
 aed3b87cee929592f128fe0b92c6d0ad 3718 utils optional gnupg2_2.2.27-3ubuntu3.dsc
 3569d7896cf8c33111676332578c397a 66660 utils optional gnupg2_2.2.27-3ubuntu3.debian.tar.xz
 1d841901ee1fe87c3f93ca2ecb25b890 10454 utils optional gnupg2_2.2.27-3ubuntu3_source.buildinfo
Original-Maintainer: Debian GnuPG Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>