Clarification on advisories
Sevan / Venture37
venture37 at gmail.com
Mon Mar 23 11:05:28 CET 2015
Hi Werner,
On 23 March 2015 at 09:48, Werner Koch <wk at gnupg.org> wrote:
>> Am I right in thinking the issues found through fuzzing which led to
>> the release of 2.1.2 still have not be back ported to previous
>> releases? certainly most of the changes in the commits highlighted are
>> applicable accounting for the change of line numbers.
>
> I may not understand what your qyestion here. The commit you are
> referring to is against 2.1 (current master) and not against 1.4. The
> parts relevant to 1.4 and 2.0 have been ported back (see above for 1.4).
Apologies, I bundled 2 enquiries about completely separate issues in one email.
Are the applicable parts of the issues highlighted here:
http://www.openwall.com/lists/oss-security/2015/02/13/14
Backported to 2.0.27?
Sevan / Venture37
More information about the Gnupg-users
mailing list