kas's late signature validation may allow unnoticed repository manipulations

Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...

MINI-376C-J6JH-28X5

Bulletin has no description...

MINI-QWR6-8QXV-99H6

Bulletin has no description...

MINI-346P-FXVF-33X2

Bulletin has no description...

MINI-V5HX-863V-QG26

Bulletin has no description...

MINI-7242-7WMW-9MXM

Bulletin has no description...

MINI-J358-24M7-3Q58

Bulletin has no description...

MINI-GF37-2C52-2GM2

Bulletin has no description...

MINI-RR22-585J-CGFV

Bulletin has no description...

MINI-M4G7-5PJR-3H22

Bulletin has no description...

MINI-Q25F-RJPF-R9GJ

Bulletin has no description...

MINI-939W-W96H-RWQF

Bulletin has no description...

MINI-QG2M-J9XJ-8992

Bulletin has no description...

MINI-4RGH-VPVJ-C982

Bulletin has no description...

MINI-M77V-42VW-QC8X

Bulletin has no description...

MINI-5V34-J7GH-WCJQ

Bulletin has no description...

MINI-F9C4-7WGH-X8WQ

Bulletin has no description...

MINI-PHF9-673P-294X

Bulletin has no description...

MINI-QVG6-V28G-HQ3C

Bulletin has no description...

MINI-7J9J-RWPR-2C59

Bulletin has no description...