Debian Security Advisory 1231-1 – Several remote vulnerabilities have been discovered in the GNU privacy, a free PGP replacement, which may lead to the execution of arbitrary code. Werner Koch discovered that a buffer overflow in a sanitizing function may lead to execution of arbitrary code when running gnupg interactively. Tavis Ormandy discovered that parsing a carefully crafted OpenPGP packet may lead to the execution of arbitrary code, as a function pointer of an internal structure may be controlled through the decryption routines.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/52920/dsa-1231-1.txt
Source: https://packetstormsecurity.com/files/52920/Debian-Linux-Security-Advisory-1231-1.html