Home GnuPG
Diffusion GnuPG c1489ca0e101

wkd: Fix path traversal attack on gpg-wks-server.

Description

wkd: Fix path traversal attack on gpg-wks-server.

* tools/gpg-wks-server.c (check_and_publish): Check for invalid
characters in sender controlled data.
* tools/wks-util.c (wks_fname_from_userid): Ditto.
(wks_compute_hu_fname): Ditto.
(ensure_policy_file): Ditto.

Details

Provenance
wernerAuthored on Jul 25 2022, 9:46 AM
Parents
rG8c9f879d4aa0: scd:openpgp: Fix workaround for Yubikey heuristics.
Branches
Unknown
Tags
Unknown