> USN-9087-1: signing-party vulnerability
[DATE: 12/11/2026 20:55]
[LANGUAGE: EN]
It was discovered that the gpg-key2ps tool in signing-party did not
properly sanitize user IDs before passing them to a shell. If a user were
tricked into processing a specially crafted OpenPGP key, an attacker could
possibly use this issue to execute arbitrary commands.