CVE-2026-55222

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

CVE-2026-55222 Isar: Unprivileged user ownership of trusted repository GPG public keys storage after bootstrap

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

CVE-2026-55222

The Isar root filesystem generation system (versions 0.11 and newer ) contains a flaw where the /etc/apt/trusted.gpg.d directory is manually created during bootstrap setup with ownership assigned to the calling user instead of root . If an unprivileged user shares the same ID as the calling user,...

EUVD-2026-109069

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

CVE-2026-55222 Isar: Unprivileged user ownership of trusted repository GPG public keys storage after bootstrap

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

CVE-2026-55222 Isar: Unprivileged user ownership of trusted repository GPG public keys storage after bootstrap

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

PT-2026-122144

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

Ilbers GmbH Isar permission and access control issues vulnerability

Versions 0.11 through 1.1 of Isar contain a permission and access control vulnerability. This issue arises because the /etc/apt/trusted.gpg.d directory is manually created during bootstrap setup to store local keys; as a result, this directory is owned by the user executing Isar rather than root...

CVE-2025-65100

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...

CVE-2025-65100

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...

CVE-2025-65100 Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...

CVE-2025-65100 Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...

CVE-2025-65100 Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...

EUVD-2025-198229

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...

Isar security vulnerabilities

Isar is a file generation script open-sourced by ilbers GmbH. A security vulnerability exists in Isar versions 0.11-rc1 and 0.11, which stems from the fact that a separate definition of ISARAPTSNAPSHOTDATE fails to set the correct timestamps for security distributions, resulting in missed securit...

CVE-2025-65100: Protection Mechanism Failure

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISARAPTSNAPSHOTDATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb...

PT-2025-47518

Name of the Vulnerable Software and Affected Versions Isar versions 0.11-rc1 through 0.11 Description Isar is a system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining the ISAR APT SNAPSHOT DATE variable alone does not correctly set the timestamp value for securit...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4996)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns sensitive data leakage via screenshots in ISAR Apps. Vulnerability Details CVEID: CVE-2020-4996 DESCRIPTION: IBM Security Access Manager...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4995)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns session not invalidated after logout in ISAR iOS App. Vulnerability Details CVEID: CVE-2020-4995 DESCRIPTION: IBM Security Access Manager...

isar-international.com XSS vulnerability

Open Bug Bounty ID: OBB-208209 Description| Value ---|--- Affected Website:| isar-international.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...