Explain 1.0.4 ?

[Graham]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Does this apply to the Windows version of GnuPG and if so, is there a patch
ready yet?


Graham <graham@todd276.worldonline.co.uk>


On Fri, 20 Oct 2000 21:33:18 +0100
Lars Hecking <lhecking@nmrc.ie> wrote:

Lars> Wayne Davis writes:
Lars> > The ChangeLog said:
Lars> > 
Lars> > >Fixed a serious bug which could lead to false signature verification
Lars> > >results when more than one signature is fed to gpg.
Lars> > 
Lars> > Can you please explain how that could come about?
Lars>  
Lars>  This sums it up quite nicely, methinks.
Lars> 
Lars>  http://www.securityfocus.com/templates/archive.pike?mid=139485&end=2000-10-14&threads=0&start=2000-10-08&fromthread=0&list=1&



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (MingW32)
Comment: For info see http://www.gnupg.org

iD8DBQE58dhxtwKLKus4nE4RAi3lAKCml9UPO2yrpWmkGfpIwfEKhILlxQCgltjO
6wDBHG1t3CuPX3n7Q1oLrN4=
=IY4v
-----END PGP SIGNATURE-----

-- 
Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
with a subject of  "unsubscribe"  to gnupg-users-request@gnupg.org