Re: DO NOT OPEN PREVIOUS MAIL Re: [oss-security] Denial of service in GnuPG

[Jens-Wolfhard Schicke-Uffmann <j.schicke () quuxlogic com>]

Hi,

On Mon, Jul 04, 2022 at 02:15:45PM +0200, Peter van Dijk wrote:
> > On 04/07/2022 07:31 Demi Marie Obenour <demi () invisiblethingslab com> wrote:
> > Signature (of /dev/null) that triggers this bug is attached, along with
> > the corresponding public key.
> This is insane. You can't send weaponised exploits that crash email
> clients to public mailing lists. Please do not do this again.
What email client would that be specifically? Because at least on
my end, nothing nefarious happened. GPG was called on the outermost
layer of signature and verified the email in entirety (and did so
quickly).

Do we have another bug lurking somewhere?


Regards,
  Jens

Attachment: signature.asc
Description: