The GNU Privacy Guard, GnuPG, is a free replacement for the PGP suite of cryptographic software.
A vulnerability has been discovered in GnuPG's armor parser.
A remote attacker could entice a user or automated system to process a specially crafted signature file, possibly resulting in execution of arbitrary commands with the privileges of the process.
There is no known workaround at this time.
All GnuPG users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-crypt/gnupg-2.5.14"