EUVD-2019-4454

Malware in sbrugna...

CVE-2019-12875

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...

CVE-2019-12875

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...

Design/Logic Flaw

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...

CVE-2019-12875

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...

CVE-2019-12875

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...

CVE-2019-12875

CVE-2019-12875 concerns Alpine Linux abuild up to version 3.4.0. The vulnerability arises because an unprivileged member of the abuild group can misuse a --keys-dir option to cause acceptance of an untrusted signing key, enabling the introduction of an untrusted package. The Red Hat advisory corr...

CVE-2019-12875: Exposure of Resource to Wrong Sphere

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...

PT-2019-12995

Name of the Vulnerable Software and Affected Versions Alpine Linux abuild versions prior to 3.4.1 Description The issue allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option, causing acceptance of an untrusted signing key. Recommendations For versio...