CVE:CVE-2019-14855
CNNVD:CNNVD-201911-1406
GnuPG是GNU计划的一套开源的加密软件，采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。
GnuPG 2.2.18之前版本中存在安全漏洞。攻击者可利用该漏洞创建伪造的证书签名。
solution:Upgrade gnupg gnupg to a higher version than 2.2.18,and avoid the version (,2.2.18); Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade canonical ubuntu_linux to a higher version than 18.04,and avoid the version 18.04