coreos-installer: incorrect signature verification on gzip-compressed install images

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

coreos-installer: incorrect signature verification on gzip-compressed install images

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

[SECURITY] Fedora 18 Update: lorax-18.22-1.fc18

Lorax is a tool for creating the anaconda install images. It also includes livemedia-creator which is used to create bootable livemed ia, including live isos and disk images. It can use libvirtd for the install, or Anaconda's image install feature...