While fixing a bug reported by Hugh Warrington, a buffer overflow has been identified in all released GnuPG versions. The current versions 1.4.5 and 2.0.0 are affected. A small patch is provided.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/52613/gpgtaketwo.txt
Source: https://packetstormsecurity.com/files/52613/gpgtaketwo.txt.html