Explain 1.0.4 ?

Lars Hecking lhecking@nmrc.ie
Fri, 20 Oct 2000 21:33:18 +0100

Wayne Davis writes:

> The ChangeLog said:
> >Fixed a serious bug which could lead to false signature verification
> >results when more than one signature is fed to gpg.
> Can you please explain how that could come about?
This sums it up quite nicely, methinks. http://www.securityfocus.com/templates/archive.pike?mid=139485&end=2000-10-14&threads=0&start=2000-10-08&fromthread=0&list=1& -- Archive is at http://lists.gnupg.org - Unsubscribe by sending mail with a subject of "unsubscribe" to gnupg-users-request@gnupg.org