CVE-2002-2204

CVE-2002-2204 affects the RPM Package Manager, specifically version 4.0.4 . The vulnerability stems from the default --checksig setting, which verifies a package’s signature validity without listing who signed it, enabling remote attackers to make a malicious package appear to originate from a tr...

Signature validation bypass

More info at https://simplesamlphp.org/security/201710-01...