[Bug 258008] Re: gnupg 1.4.6 in hardy heron fails to verify some files signed by gnupg 1.4.9

[Ethan Blanton]

This bug can be closed.  As far as I know it is still valid, but as it
was not addressed in a timely fashion it is no longer relevant.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnupg in Ubuntu.
https://bugs.launchpad.net/bugs/258008

Title:
  gnupg 1.4.6 in hardy heron fails to verify some files signed by gnupg
  1.4.9

Status in gnupg package in Ubuntu:
  New

Bug description:
  Ubuntu 8.04.1
  gnupg 1.4.6-2ubuntu5

  The gnupg 1.4.6 shipping with Hardy Heron fails to verify some files
  which are signed by newer versions of gnupg.  I unfortunately cannot
  (at this time) provide public examples of such files.

  Stock gnupg 1.4.6 exhibits the same problem; stock 1.4.9 compiled for
  the system works properly.  The problem seems to be in older versions
  of gnupg itself, not Ubuntu, though neither the gnupg ChangeLog nor
  NEWS specifically mention any fixes for such failures post-1.4.6.

  I am not marking this bug as a security vulnerability, although it
  certainly has security implications in some situations.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnupg/+bug/258008/+subscriptions