[Announce] False positive signature verification in GnuPG

[David Shaw]

On Wed, Feb 15, 2006 at 07:06:24PM +0100, Florian Weimer wrote:
> * Werner Koch:
> 
> > All versions of gnupg prior to 1.4.2.1 are affected if they are used
> > in certain unattended operation modes.
> 
> Does this include, for instance, version 1.0.6?  There are somewhat
> conflicting claims floating around regarding the list of affected
> versions.

Yes, it does include version 1.0.6.

David