Public bug reported:
Ubuntu 8.04.1
gnupg 1.4.6-2ubuntu5
The gnupg 1.4.6 shipping with Hardy Heron fails to verify some files
which are signed by newer versions of gnupg. I unfortunately cannot (at
this time) provide public examples of such files.
Stock gnupg 1.4.6 exhibits the same problem; stock 1.4.9 compiled for
the system works properly. The problem seems to be in older versions of
gnupg itself, not Ubuntu, though neither the gnupg ChangeLog nor NEWS
specifically mention any fixes for such failures post-1.4.6.
I am not marking this bug as a security vulnerability, although it
certainly has security implications in some situations.
** Affects: gnupg (Ubuntu)
Importance: Undecided
Status: New
--
gnupg 1.4.6 in hardy heron fails to verify some files signed by gnupg 1.4.9
https://bugs.launchpad.net/bugs/258008
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
