GnuPG 2.3.8 released
Version 2.3.8 of the GNU Privacy Guard is out. It contains a few newfeatures but the real purpose is to fix CVE-2022-3515,an integer overflow vulnerability that can be exploited remotely for codeexecution via a, for example, malicious S/MIME attachment. Note that theactual vulnerability is in the libksba library, which isnormally packaged separately on Linux systems.