SA-04:10 problem -- GPG error: "not a detached signature"

[Saint Aardvark the Carpeted]

I've just downloaded the SA-04:10 (CVS server) patch and signature
file, and I've run into problems trying to verify it.  I run:

	gpg --verify cvs.patch.asc cvs.patch

and instead of the usual "Good signature from FreeBSD Security
Officer" message, I see this error:

	gpg: not a detached signature

I can verify the signature file alone ("gpg --verify cvs.patch.asc")
-- gpg is happy with that and says it's a good signature, but that
doesn't check the patch itself.

Am I doing something wrong?  Has anyone else had this problem?

I am now blessing your GPG key ring...
-- 
Saint Aardvark the Carpeted
aardvark at saintaardvarkthecarpeted.com
Because the plural of Anecdote is Myth.