luxDec 29
Flüpke

https://access.redhat.com/security/cve/cve-2025-68973

> To mitigate this issue, users should avoid processing untrusted or unverified input with GnuPG.

Before verifying a signature with GnuPG use some secure scheme to verify authenticity? 🙂🙃🙂🙃

cve-details

Dec 29 at 4:51pmWeb
Show threadzoe Dec 29
@fluepke naja das macht man so mit "Trust me bro, das kannste ruhig in GnuPG reintun"
Show threadzoe Dec 29
@fluepke Wie funktioniert das eigentlich mit "Verified" commits in git?
Show threadNiko4uJan 1
@commanderred
Hoffentlich ssh und nicht gpg zum signieren benutzen
@fluepke
Show threadEloy.Dec 30
@fluepke this is a piece of art
Show threadYsegrimDec 30
@fluepke You've got one job …