Ubuntu patches command-execution vulnerability in signing-party on Bionic and Xenial
Ubuntu has issued a fix for CVE-2019-11627 in signing-party: gpg-key2ps may execute commands as the logged-in user when processing a specially crafted OpenPGP key. Prioritize updates on Ubuntu Bionic and Xenial, and confirm access to the relevant Ubuntu Pro/ESM service.