[Bug 1844059] Re: Please apply mitigations for CVE-2019-13050

[Tom Reynolds]

Thanks for clarifying this here and on the CVE tracker, Alex + Marc!

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnupg2 in Ubuntu.
https://bugs.launchpad.net/bugs/1844059

Title:
  Please apply mitigations for CVE-2019-13050

Status in gnupg2 package in Ubuntu:
  Confirmed

Bug description:
  According to https://people.canonical.com/~ubuntu-
  security/cve/2019/CVE-2019-13050.html mitigating CVE-2019-13050 was
  deferred, however mitigation is needed.

  Reading the comments listed there, I am unable to determine the
  reasoning / cause for deferral, could you please try to help me
  understand? Thank in advance.

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: gnupg 2.2.4-1ubuntu1.2
  ProcVersionSignature: Ubuntu 5.0.0-27.28~18.04.1-generic 5.0.21
  Uname: Linux 5.0.0-27-generic x86_64
  ApportVersion: 2.20.9-0ubuntu7.7
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Sun Sep 15 17:14:48 2019
  SourcePackage: gnupg2
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/1844059/+subscriptions