As per the CVE details in the Ubuntu CVE tracker for this CVE (https://people.canonical.com/~ubuntu- security/cve/2019/CVE-2019-13050.html) you can see Marc mentions this was deferred because the specific updates to address this are not complete so we are waiting on better upstream fixes before trying to fix this in Ubuntu.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1844059 Title: Please apply mitigations for CVE-2019-13050 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/1844059/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs