[Rpm-maint] [rpm-software-management/rpm] Do not parse header when validating signatures (#1468)

[Demi Marie Obenour]

Currently, `rpm -K` parses the header as well as the signature.  If it only parsed the signature, the attack surface would be much smaller, as a far simpler parser could be used.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1468
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20201227/0ed7d221/attachment.html>