#disclosure

gpg.fail talk flags gpgsm debug RCE and un-CVEd libgcrypt PSS fix

Researchers describe an unreported format-string bug in certificate import with debugging on, and urge tracking for an already-shipped RSASSA-PSS overflow.