CVE-2020-25860

The CVE-2020-25860 issue affects the Pengutronix RAUC update client, specifically the install.c module in versions prior to 1.5. The vulnerability is a Time-of-Check Time-of-Use flaw where signature verification on an update file occurs before reopening it for installation. An attacker who can mo...