Skip to content

Fix CVE-2020-35766#260

Open
liberodark wants to merge 1 commit into
trusteddomainproject:developfrom
liberodark:cve
Open

Fix CVE-2020-35766#260
liberodark wants to merge 1 commit into
trusteddomainproject:developfrom
liberodark:cve

Conversation

@liberodark
Copy link
Copy Markdown

@liberodark liberodark commented May 7, 2026

Hi,

Fix #113

Best Regards

@futatuki
Copy link
Copy Markdown

futatuki commented May 7, 2026

Proposal for a fix of issue #148 (CVE-2022-48521) is already filed as PR #189 by @glts, the reporter of the issue.

Also, it seems those two fixes are not logically related.

@liberodark
Copy link
Copy Markdown
Author

Hi, @futatuki

Good to know.

Best Regards

@liberodark liberodark changed the title Fix CVE-2020-35766 & CVE-2022-48521 Fix CVE-2020-35766 May 8, 2026
@futatuki
Copy link
Copy Markdown

futatuki commented May 8, 2026

I could confirm that the PR is amended.

(Although I am only one of watchers who don't have any authority, but) the logic to avoid overwriting an existing file and the place of the test key looks good to me.

If I would add a comment, there are alternative few ideas where and how the test key is placed, in the issue comment for #113 .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants