Skip to content
  • Justus Winter's avatar
    Bump Sequoia to 0.9. · d628acdf
    Justus Winter authored
      - Sequoia now ignores any unhashed subpackets when comparing
        signatures, closing a DoS vector.  Previously, one could create
        any number of valid signatures from a single valid signature that
        were considered distinct by mutating the unhashed subpacket area.
    
      - Sequoia now handles malformed UserIDs of the form "$addr <$addr>".
        Adjust database::test::test_bad_uids accordingly.
    
      - Update src/dump.rs from Sequoia.
    
      - Sequoia now ignores any Unicode codepoint considered whitespace
        when parsing Fingerprints and KeyIDs.  Fixes #122.
    d628acdf