Explain 1.0.4 ?

[Lars Hecking]

Wayne Davis writes:
> The ChangeLog said:
> 
> >Fixed a serious bug which could lead to false signature verification
> >results when more than one signature is fed to gpg.
> 
> Can you please explain how that could come about?
 
 This sums it up quite nicely, methinks.

 http://www.securityfocus.com/templates/archive.pike?mid=139485&end=2000-10-14&threads=0&start=2000-10-08&fromthread=0&list=1&

-- 
Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
with a subject of  "unsubscribe"  to gnupg-users-request@gnupg.org