Lucene search
+L

2 matches found

Mageia
Mageia
added 2019/03/07 4:34 p.m.38 views

Updated python-gnupg packages fix security vulnerability

When symmetric encryption is used, data can be injected through the passphrase property of the gnupg.GPG.encrypt and gnupg.GPG.decrypt methods. The supplied passphrase is not validated for newlines, and the library passes --passphrase-fd=0 to the gpg executable, which expects the passphrase on th...

7.5CVSS2.6AI score0.08548EPSS
SaveExploits2References2
Rows per page
Query Builder