Yay for bugs in GPG:

This new problem affects the use of *gpg* for verification of signatures which are _not_ detached signatures. The problem also affects verification of signatures embedded in encrypted messages; i.e. standard use of gpg for mails.

Time to upgrade.

New comments are currently disabled for this entry.