Software Update: GnuPG 2.2.23

Version 2.2.23 of GnuPG has been released. GnuPG stands for GNU Privacy Guard and is also often abbreviated to GPG. This is a collection of tools for securing communication flows and data. It can be used to encrypt data and create digital signatures, and to provide a framework for public key cryptography. It supports both OpenPGP and s/mime standards. For more information, please refer to this page. The main changes made in this release are listed below.

Noteworthy changes in version 2.2.23:

• gpg: Fix AEAD preference list overflow. [T5050, CVE-2020-25125]
• gpg: Fix a possible segv in the key cleaning code.
• gpgsm: Fix a minor RFC2253 parser bug. [T5037]
• scdaemon: Fix a PIN verify failure on certain OpenPGP card implementations. Regression in 2.2.22. [T5039]
• po: Fix bug in Hungarian translation. Updates for the Czech, Polish, and Ukrainian translations.