THREATOPS
THREAT OPSThreat News › Re: Retrospective by 'gpg.fail' authors

Re: Retrospective by 'gpg.fail' authors

lowoss_secPublished 2026-09-15

<p>Posted by Werner Koch on Sep 15</p>Hi!<br /> <br /> On Mon, 14 Sep 2026 21:28, Clemens Lang said:<br /> <br /> Actually in all versions &gt; 2.2 if you use --debug x509. The result is<br /> that you get garbled output on stderr. Using the certificates from<br /> their Git repo we have not been able to get more than a segv. That is<br /> obvious because the DER is used as printf format string

Original source: https://seclists.org/oss-sec/2026/q3/784