Debian Linux Security Advisory 4222-1 - Marcus Brinkmann discovered that GnuGPG performed insufficient sanitisation of file names displayed in status messages, which could be abused to fake the verification status of a signed email.
6a19749f3da79b8b886406716d726e163566861df974152823ddc17394f42d0b