> Ubuntu signing-party Fixes Crafted OpenPGP Key Command Execution

signing-party could be made to run programs as your login if it processed a specially crafted OpenPGP key.