I think that he just checked the dependencies. On my Debian box, it's: gnupg2 -> libcurl3-gnutls -> libgnutls26 So, it's related somehow. But I don't think it make sense to call all those software victims. --