| Package | Affected versions | Patched versions |
|---|---|---|
| gnupg | = 2.2.4= 2.2.5 |
GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free