121 matches found
git-crypt
git-crypt - git의 투명한 파일 암호화 git-crypt는 git 저장소 내 파일의 투명한 암호화 및 복호화를 가능하게 합니다. 보호하기로 선택한 파일은 커밋 시 암호화되고, 체크아웃 시 복호화됩니다. git-crypt를 사용하면 공개 및 비공개 콘텐츠가 혼합된 저장소를 자유롭게 공유할 수 있습니다. git-crypt는 우아하게 저하gracefully degrade되므로, 비밀 키가 없는 개발자도 암호화된 파일이 있는 저장소를 클론하고 커밋할 수 있습니다. 이를 통해 코드와 동일한 저장소에 비밀 자료예: 키 또는...
terrapod-PoC
Terrapod: セキュリティアドバイザリ CVEステータス: リクエスト済み、割り当て待ち。この脆弱性は GHSA-6qrc-597p-mrp9 として公開されています。CVEが割り当てられた時点で、このリポジトリは CVE-YYYY-NNNNN-terrapod-PoC に改名され、このバナーはCVEリンクに置き換えられます。 | ---|--- 研究者| Dostxodjayev Abdullox @squeeze440 アドバイザリ| GHSA-6qrc-597p-mrp9 CVSS 3.1| 6.5 Medium 脆弱性| CWE-862, CWE-284 概要 Terrap...
SUSE SLED15: libzypp / libzypp-devel / zypper / zypper-log / etc (SUSE-SU-2026:4129-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4129-1 advisory. Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625....
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. hasCredentials requires both username AND password to be non-empty bsc1273242. GPG Key hints in repoindex.xml require a...
PYSEC-2026-3799
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
CVE-2026-81714
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
PYSEC-2026-3777
opensslencrypt versions before 1.4.9 contain a signature verification vulnerability in gpgrunner.verifydetached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing key...
CVE-2026-81714 openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
EUVD-2026-67064
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
CVE-2026-81714 openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
opensslencrypt pip: openssl-encrypt versions = 1.4.8 use suffix-tolerant fingerprint matching in enrolltrustkey when binding a plugin-signing trust anchor. An operator who confirms a short forgeable, 32-bit GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which...
PT-2026-82609
Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The enroll trust key function uses suffix-tolerant fingerprint matching when binding a plugin-signing trust anchor. This allows an operator to confirm a short, forgeable GPG key ID, potential...
CLSA-2026-1773411204 Update of alt-php
Move gpg key and repo installation from debian/install to postinst Add support for multiple deb platforms...
SUSE SLES15: python3-rhnlib / spacewalk-backend / spacewalk-backend-app / etc (SUSE-SU-2025:3826-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3826-1 advisory. susemanager-build-keys: - Update SUSE GPG key and make it available for Salt bsc1250911 susemanager-sls: - Version 4.3.50-0 Fix OS Family grain...
SUSE-SU-2025:3826-1 Security update 4.3.16.1 for SUSE Manager Server 4.3 LTS
This update fixes the following issues: susemanager-build-keys: - Update SUSE GPG key and make it available for Salt bsc1250911 susemanager-sls: - Version 4.3.50-0 Fix OS Family grain name bsc1250911 - Version 4.3.49-0 Fixed syntax error in Salt state - Version 4.3.48-0 Automatically deploy the...
EUVD-2012-5277
Malware in sbrugna...
EUVD-2018-2926
Malware in sbrugna...
EUVD-2011-4336
Malware in sbrugna...
EUVD-2018-1824
Malware in sbrugna...