PT-2026-85194

openssl encrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enroll trust key when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor,...