GHSA-9344-P847-QM5C Low severity (DoS) vulnerability in sequoia-openpgp

There is a denial-of-service vulnerability in sequoia-openpgp, our crate providing a low-level interface to our OpenPGP implementation. When triggered, the process will enter an infinite loop. Many thanks to Andrew Gallagher for disclosing the issue to us. Impact Any software directly or indirect...

csaf-walker (=0.1.0), did-webkey (=0.1.1) +17 more potentially affected by CVE-2024-58261 via sequoia-openpgp (>=1.14.0 <=1.17.0)

sequoia-openpgp CARGO version =1.14.0, =0.3.0, =0.25.0, =0.1.0, =0.30.0, =0.1.0, =0.1.0, =0.1.0, =0.26.0, =0.28.0 - sequoia-openpgp-mt =0.1.0 and more Source cves: CVE-2024-58261 Source advisory: OSV:RUSTSEC-2024-0345...

Low severity (DoS) vulnerability in sequoia-openpgp

There is a denial-of-service vulnerability in sequoia-openpgp, our crate providing a low-level interface to our OpenPGP implementation. When triggered, the process will enter an infinite loop. Many thanks to Andrew Gallagher for disclosing the issue to us. Impact Any software directly or indirect...

RUSTSEC-2024-0345 Low severity (DoS) vulnerability in sequoia-openpgp

There is a denial-of-service vulnerability in sequoia-openpgp, our crate providing a low-level interface to our OpenPGP implementation. When triggered, the process will enter an infinite loop. Many thanks to Andrew Gallagher for disclosing the issue to us. Impact Any software directly or indirect...

PT-2025-31016 · Unknown · Sequoia-Openpgp

Name of the Vulnerable Software and Affected Versions: sequoia-openpgp crate versions 1.13.0 through 1.20.9 Description: The sequoia-openpgp crate for Rust contains a flaw where RawCertParser operations can enter an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages...

Fedora: Security Advisory for rust-sequoia-wot (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-sequoia-sqv (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : kdepim (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kmail: Send Later with Delay bypasses OpenPGP CVE-2017-9604 - KDE KMail does not encrypt attachments in...

RHEL 6 : kdepim (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kmail: Send Later with Delay bypasses OpenPGP CVE-2017-9604 - KDE KMail does not encrypt attachments in...

[SECURITY] Fedora 39 Update: rust-sequoia-sqv-1.2.1-2.fc39

A simple OpenPGP signature verification program...

[SECURITY] Fedora 39 Update: rust-sequoia-wot-0.11.0-4.fc39

An implementation of OpenPGP's web of trust...

Fedora: Security Advisory for rust-sequoia-wot (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-sequoia-wot-0.11.0-4.fc40

An implementation of OpenPGP's web of trust...

[SECURITY] Fedora 40 Update: rust-sequoia-sqv-1.2.1-2.fc40

A simple OpenPGP signature verification program...

openSUSE 15 Security Update : gitui (openSUSE-SU-2024:0135-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2024:0135-1 advisory. - update to version 0.26.2: respect configuration for remote when fetching also applies to pulling add : character to sign-off trailer to comply with...

OPENSUSE-SU-2024:0135-1 Security update for gitui

This update for gitui fixes the following issues: - update to version 0.26.2: respect configuration for remote when fetching also applies to pulling add : character to sign-off trailer to comply with Conventional Commits standard support overriding builddate for reproducible builds - update...

PT-2024-9391

Name of the Vulnerable Software and Affected Versions: OpenSC affected versions not specified Description: A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. This issue arises when a crafted USB device or smart card provides malicious responses to the APDUs duri...

RHEL 7 : kmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kmail: Send Later with Delay bypasses OpenPGP CVE-2017-9604 - In KDE KMail 19.12.3 aka 5.13.3, the SMTP...

RHEL 6 : kmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kmail: Send Later with Delay bypasses OpenPGP CVE-2017-9604 - In KDE KMail 19.12.3 aka 5.13.3, the SMTP...

RHEL 6 : rpm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - rpm: Following symlinks to directories when installing packages allows privilege escalation CVE-2017-7500...