Design/Logic Flaw

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions...

CVE-2014-3585

The CVE-2014-3585 entry concerns the Red Hat redhat-upgrade-tool, which does not verify GPG signatures when upgrading versions. This is described as enabling potential forgery or MitM-style abuse, with mitigations discussed in multiple sources. The impact is characterized as high (critical/remote...

CVE-2014-3585

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions...

PT-2019-7094 · Red Hat · Redhat-Upgrade-Tool

Name of the Vulnerable Software and Affected Versions: redhat-upgrade-tool affected versions not specified Description: The issue is related to the redhat-upgrade-tool not checking GPG signatures when upgrading versions. Recommendations: At the moment, there is no information about a newer versio...

Fedora Update for php-robrichards-xmlseclibs3 FEDORA-2019-ec8719a21c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for php-robrichards-xmlseclibs FEDORA-2019-dc90bf093b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: php-robrichards-xmlseclibs-2.1.1-1.fc30

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. NOTE: php-mcrypt will not be automatically installed as a dependency of this package so it will need to be "manually" installed if it is required -- specifically for the following XMLSecurityKey encryption type...

[SECURITY] Fedora 30 Update: php-robrichards-xmlseclibs3-3.0.4-1.fc30

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Autoloader: /usr/share/php/RobRichards/XMLSecLibs3/autoload.php...

[SECURITY] Fedora 29 Update: php-robrichards-xmlseclibs-2.1.1-1.fc29

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. NOTE: php-mcrypt will not be automatically installed as a dependency of this package so it will need to be "manually" installed if it is required -- specifically for the following XMLSecurityKey encryption type...

[SECURITY] Fedora 29 Update: php-robrichards-xmlseclibs3-3.0.4-1.fc29

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Autoloader: /usr/share/php/RobRichards/XMLSecLibs3/autoload.php...

[SECURITY] Fedora 31 Update: php-robrichards-xmlseclibs3-3.0.4-1.fc31

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Autoloader: /usr/share/php/RobRichards/XMLSecLibs3/autoload.php...

[SECURITY] Fedora 31 Update: php-robrichards-xmlseclibs-2.1.1-1.fc31

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. NOTE: php-mcrypt will not be automatically installed as a dependency of this package so it will need to be "manually" installed if it is required -- specifically for the following XMLSecurityKey encryption type...

SUSE-SU-2019:1391-2 Security update for evolution

This update for evolution fixes the following issue: Security issue fixed: - CVE-2018-15587: Fixed OpenPGP signatures spoofing via specially crafted email that contains a valid signature bsc1125230...

PT-2019-6323

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.2.18 Description A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. The issue...

Signature validation bypass in XmlSecLibs

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message...

DEBIAN-CVE-2019-18835

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...

PYSEC-2019-186

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...

EulerOS 2.0 SP5 : nss-softokn (EulerOS-SA-2019-2175)

According to the version of the nss-softokn packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the...

CVE-2019-3465

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message...

Input validation

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message...