Hi,
Would like to just double check if GnuPG is affected by this CVE, that includes dotnet + brotli
Hi @bell,
it is not affected.
GnuPG and Gpg4win do not use .NET anywhere. The same is true for brotli currently.
To not cause confusion in the future: It is likely that our next minor Gpg4win release 5.2.0 will ship the optional component Okular with a poppler version supporting brotli, but this will of course then be an up to date version without that vulnerability.