[Bug 1097774] VUL-0: CVE-2018-12356: pass, bitcoin: Improper parsing of GPG output allows attackers to spoof file signatures, read passwords and execute code