771e8d8886
from gnupg.org: Signature verification of non-detached signatures may give a positive result but when extracting the signed data, this data may be prepended or appended with extra data not covered by the signature. Thus it is possible for an attacker to take any signed message and inject extra arbitrary data. |
||
---|---|---|
.. | ||
patches | ||
pkg | ||
distinfo | ||
Makefile |