The 0xdeadbeef attack still works; this makes Tomanek's keyserver import filter
essentially useless. If you'd like a PoC, there is a keyserver that generates V3 keys
with spoofed keyids on demand available at
https://github.com/coruus/cooperpair/tree/master/keysteak

A patch to HEAD is attached; it could use some testing. (I can provide an actually-
well-tested patch against 1.x if you would like, but I know you prefer to backport at
this point.)

Even better would be to disable importing V3 keys entirely, and perhaps require that an
option be set explicitly to use them. This was suggested on the OpenPGP list:
http://www.ietf.org/mail-archive/web/openpgp/current/msg00366.html