Probably resurfacing, because we have some new attacks thanks to CCC. [0]
[0] https://news.ycombinator.com/item?id=46453461
Worth noting: minisign and age were also affected by a couple things here.
GnuPG has decided a couple things are out of scope, fixed a couple others. Not all is in distro packages yet.
age didn't have the clearest way to report things - discord is apparently the point of contact. Which will probably improve soon.
minisign was affected by most everything GnuPG was, but had a faster turnaround to patching.
Indeed, I saw it linked to in that thread, read it and thought it'd be worth resurfacing.
Worth noting: minisign and age were also affected by a couple things here.
GnuPG has decided a couple things are out of scope, fixed a couple others. Not all is in distro packages yet.
age didn't have the clearest way to report things - discord is apparently the point of contact. Which will probably improve soon.
minisign was affected by most everything GnuPG was, but had a faster turnaround to patching.