[ubuntu/resolute-proposed] gnupg2 2.4.8-4ubuntu2 (Accepted)

[Allen Huang]

gnupg2 (2.4.8-4ubuntu2) resolute; urgency=medium

  * SECURITY UPDATE: Remote Code Execution
    - debian/patches/CVE-2025-68973.patch: gpg: Fix possible memory
      corruption in the armor parser.
    - CVE-2025-68973

Date: Mon, 05 Jan 2026 23:02:06 +0000
Changed-By: Allen Huang <allen.huang at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/gnupg2/2.4.8-4ubuntu2
-------------- next part --------------
Format: 1.8
Date: Mon, 05 Jan 2026 23:02:06 +0000
Source: gnupg2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.8-4ubuntu2
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Allen Huang <allen.huang at canonical.com>
Changes:
 gnupg2 (2.4.8-4ubuntu2) resolute; urgency=medium
 .
   * SECURITY UPDATE: Remote Code Execution
     - debian/patches/CVE-2025-68973.patch: gpg: Fix possible memory
       corruption in the armor parser.
     - CVE-2025-68973
Checksums-Sha1:
 f5b4a9a136f83d1690e19c6ab8ea8f6f6827771a 4565 gnupg2_2.4.8-4ubuntu2.dsc
 13651d239438db826458e7abe946d97d0e8d7eda 122316 gnupg2_2.4.8-4ubuntu2.debian.tar.xz
 41812b5d321c359802b13aa7a3056a5befabc1c7 13732 gnupg2_2.4.8-4ubuntu2_source.buildinfo
Checksums-Sha256:
 b1f3360ac5b29623e82fdc2d843bde348ad373aa209828d1be32c292404994e3 4565 gnupg2_2.4.8-4ubuntu2.dsc
 bc04272bdaf67b4afa08d877157b440a1b910471b3eeaec6a6bc7ee8bde9b453 122316 gnupg2_2.4.8-4ubuntu2.debian.tar.xz
 85f40ece16f15c48acd07ca5414722d1599c9f5e4d149816283364207f0e48dc 13732 gnupg2_2.4.8-4ubuntu2_source.buildinfo
Files:
 8b828f17705af10a5c796430a1b1b1d7 4565 utils optional gnupg2_2.4.8-4ubuntu2.dsc
 39c6dc57e3c7d34c0db3da36892b7f6c 122316 utils optional gnupg2_2.4.8-4ubuntu2.debian.tar.xz
 1ea30fb1b17c3fbcfae48cdf277e51fc 13732 utils optional gnupg2_2.4.8-4ubuntu2_source.buildinfo
Original-Maintainer: Debian GnuPG Maintainers <pkg-gnupg-maint at lists.alioth.debian.org>