[Rpm-maint] [rpm-software-management/rpm] Fix OpenPGP parsing bugs (#1675)

[Demi Marie Obenour]

- signatures of the wrong type were accepted
- signatures were allowed to contain multiple packets
- numerous out-of-bounds reads
- undefined pointer arithmetic
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1675

-- Commit Summary --

  * Fix OpenPGP parsing bugs

-- File Changes --

    M rpmio/rpmpgp.c (150)
    M rpmio/rpmpgp.h (4)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1675.patch
https://github.com/rpm-software-management/rpm/pull/1675.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1675
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210505/1db49e9c/attachment-0001.html>