GnuPG patched to thwart 'fake filename'

Missing input sanitisation fixed after hacker spat

If you're a developer relying on GnuPG, check upstream for an update that plugs an input sanitisation bug."