GnuPG.org has released versions 1.4.6 and 2.0.1 of GPG, the popular free PGP replacement to address the vulnerabilities noted in CVE-2006-6235, a code execution vulnerability triggered by a malformed message/file.  You are urged to upgrade as soon as possible.

Announcement: http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000245.html
GPG home: http://www.gnupg.org