[pkg-gnupg-maint] Bug#1107981: gnupg2: CVE-2025-30258 unfixed in bookwork (Debian 12)

[Andreas Metzler]

Package: gnupg2
Version: 2.2.40-1.1
Severity: normal

Hello,

I have given fixing CVE-2025-30258 fo stable a shot and failed. It
built, however there is something broken, ostree's testsuite throws an
error. (ostree and gpgme1.0 testsuites are good testcases fror gnupg
updates.)

cu Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Cherry-pick-upstream-fixes-for-CVE-2025-30258.patch.gz
Type: application/gzip
Size: 12443 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20250618/25d7e73e/attachment.gz>