Clarification on advisories

Sevan / Venture37 venture37 at gmail.com
Mon Mar 23 11:05:28 CET 2015


Hi Werner,

On 23 March 2015 at 09:48, Werner Koch <wk at gnupg.org> wrote:
>> Am I right in thinking the issues found through fuzzing which led to
>> the release of 2.1.2 still have not be back ported to previous
>> releases? certainly most of the changes in the commits highlighted are
>> applicable accounting for the change of line numbers.
>
> I may not understand what your qyestion here.  The commit you are
> referring to is against 2.1 (current master) and not against 1.4.  The
> parts relevant to 1.4 and 2.0 have been ported back (see above for 1.4).

Apologies, I bundled 2 enquiries about completely separate issues in one email.
Are the applicable parts of the issues highlighted here:
http://www.openwall.com/lists/oss-security/2015/02/13/14
Backported to 2.0.27?


Sevan / Venture37



More information about the Gnupg-users mailing list