CVE-2008-7129: Undefined Security Weakness

XySSL before 0.9 allows remote attackers to cause a denial of service infinite loop via an X.509 certificate that does not pass the RSA signature check during verification...

[SECURITY] [DSA 993-2] New GnuPG packages fix broken signature check

-------------------------------------------------------------------------- Debian Security Advisory DSA 993-2 [email protected] http://www.debian.org/security/ Martin Schulze March 13th, 2006 http://www.debian.org/security/faq -...

CVE-2006-0049: Undefined Security Weakness

gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...

[SECURITY] [DSA 993-1] New GnuPG packages fix broken signature check

-------------------------------------------------------------------------- Debian Security Advisory DSA 993-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 993-1] New GnuPG packages fix broken signature check

-------------------------------------------------------------------------- Debian Security Advisory DSA 993-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2006 http://www.debian.org/security/faq -...

Fedora Core 4 : gnupg-1.4.2.1-1 (2006-116)

The GNU Privacy Guard provides encryption and signing for messages and arbitrary files, and implements the OpenPGP standard as described by IETF RFC2440. Version 1.4.2 of GnuPG would in some cases erroneously exit with status 0 signaling no errors if it was invoked to check a signature but found ...

CVE-2002-2204: Undefined Security Weakness

The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source...

CVE-2000-0974: Undefined Security Weakness

GnuPG gpg 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection...

[SECURITY] New version of gnupg installed

Package: gnupg Debian-specific: no The version of gnupg that was distributed in Debian GNU/Linux 2.2 had a logic error in the code that checks for valid signatures which could cause false positive results: Jim Small discovered that if the input contained multiple signed sections the exit-code gnu...