UBUNTU-CVE-2023-32076

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...

PT-2023-23587 · In-Toto +1 · In-Toto +1

Name of the Vulnerable Software and Affected Versions: in-toto versions 1.4.0 and prior Description: The in-toto configuration is read from various directories, allowing users to configure the framework's behavior. Among the files read is .in totorc, a hidden file in the directory where in-toto i...