[ubuntu/focal-updates] gnupg2 2.2.19-3ubuntu2.5 (Accepted)

[Ubuntu Archive Robot]

gnupg2 (2.2.19-3ubuntu2.5) focal-security; urgency=medium

  * debian/patches/fix-key-validity-regression-due-to-CVE-2025-
    30258.patch:
    - Fix a key validity regression following patches for CVE-2025-30258,
      causing trusted "certify-only" primary keys to be ignored when checking
      signature on user IDs and computing key validity. This regression makes
      imported keys signed by a trusted "certify-only" key have an unknown
      validity (LP: #2114775).

Date: 2025-07-03 14:01:11.216880+00:00
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/gnupg2/2.2.19-3ubuntu2.5
-------------- next part --------------
Sorry, changesfile not available.