Gentoo Linux Security Advisory GLSA 200708-08 – The functions deletekey(), gpg_check_sign_pgp_mime() and gpg_recv_key() used in the SquirrelMail G/PGP encryption plugin do not properly escape user-supplied data. Versions less than 1.4.10a-r2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/58497/glsa-200708-08.txt
Source: https://packetstormsecurity.com/files/58497/Gentoo-Linux-Security-Advisory-200708-8.html