Difficulties with PGP 7.1?

Werner Koch wk@gnupg.org
Thu Apr 11 12:23:02 2002


On 11 Apr 2002 10:42:08 +0200, Adrian 'Dagurashibanipal' von Bidder said:

> I'm using 1.0.3 - perhaps some things are fixed in cvs. So I'll just
> wait. (after all, it's not critical to me, it's just annoying.).

Noteworthy changes in version 1.0.4 (2000-10-17)
------------------------------------------------

    * Fixed a serious bug which could lead to false signature verification
      results when more than one signature is fed to gpg.  This is the
      primary reason for releasing this version.

Noteworthy changes in version 1.0.5 (2001-04-29)
------------------------------------------------

    * WARNING: Corrected hash calculation for input data larger than
      512M - it was just wrong, so you might notice bad signature in
      some very big files.  It may be wise to keep an old copy of
      GnuPG around.

Noteworthy changes in version 1.0.6 (2001-05-29)
------------------------------------------------

    * Security fix for a format string bug in the tty code.


You should have updated at least to 1.0.4, however the 1.0.7 release
is not that far away.

  Werner