GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.
修复方式
yum update PackageName
是否受影响判断
判断方法：yum info PackageName 结果说明：版本小于修复版本，则受此漏洞影响，版本大于等于修复版本，则此漏洞已修复。