[Rpm-maint] [rpm-software-management/rpm] Check that OpenPGP signatures are the correct type (#1742)

Demi Marie Obenour notifications at github.com
Thu Jul 1 10:17:48 UTC 2021


All OpenPGP signatures of packages are type 0 (binary), but RPM does not check this.  RPM should check this as a defense-in-depth measure.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1742
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210701/a04bb058/attachment.html>


More information about the Rpm-maint mailing list