[pkg-gnupg-maint] GnuPG not updated yet?

Andreas Metzler ametzler at bebt.de
Wed Dec 7 18:30:46 GMT 2022


On 2022-12-07 Jürgen <jg-design at gmx.net> wrote:
> Hi,
> there was a security issue lately in libksba which is directly
> linked into gnupg in Debian bullseye. See
> https://gnupg.org/blog/20221017-pepe-left-the-ksba.html

> When will a new gnupg compile be included in bullseye security?

Afaiui no new gnupg compile is necessary, since the gpg packages link
dynamically instead of statically against libksba. libksba has already
been updated in October.
https://lists.debian.org/debian-security-announce/2022/msg00224.html

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'



More information about the pkg-gnupg-maint mailing list