Note:
As the 'tools/Changelog' shows, gpg-zip is not installed with gnupg2 because
it gets installed by gnupg. Strangely gnupg2 still tries to install a gpg-zip
manpage which ofcourse conflicts too.
tools/Changelog:
-----------------------------------------------------------------------------
2006-10-12 Werner Koch <wk@g10code.com>
* Makefile.am (gpg-zip, gpgsplit): Do not install due to a
conflict with gpg1.
-----------------------------------------------------------------------------
CVE-2008-1530 (High) :
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and
possibly execute arbitrary code via crafted duplicate keys that are imported from key servers,
which triggers "memory corruption around deduplication of user IDs."
Christian Wiese
Aldas Nabazas
Alejandro Mery
Christian Wiese
Nagy Károly Gábriel