From the cvs log:

    1 $Id: NEWS,v 1.10 2007/02/06 18:12:08 akorty Exp $
    2
    3 Version 1.92
    4 ============
    5
    6 SECURITY FIX: The allow_blank_passphrase option was defeatable simply
    7 by entering a random but non-blank passphrase.  Thanks to Rob
    8 Henderson for the report.


I guess the upstream version has already fixed the problem.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to