94 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-39853
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in...
OPENSUSE-SU-2026:20473-1 Security update for osslsigncode
This update for osslsigncode fixes the following issues: Changes in osslsigncode: - Update to 2.13 bsc1260680, CVE-2025-70888: fixed integer overflows when processing APPX compressed data streams fixed double-free vulnerabilities in APPX file processing fixed multiple memory corruption issues in ...
Security update for osslsigncode (critical)
openSUSE Security Update: Security update for osslsigncode Announcement ID: openSUSE-SU-2026:0116-1 Rating: critical References: 1260680 Cross-References: CVE-2025-70888 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...
osslsigncode-2.13-1.1 on GA media (moderate)
osslsigncode-2.13-1.1 on GA media Announcement ID: openSUSE-SU-2026:10482-1 Rating: moderate Cross-References: CVE-2025-70888 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
Security update for osslsigncode (critical)
openSUSE Security Update: Security update for osslsigncode Announcement ID: openSUSE-SU-2026:0115-1 Rating: critical References: 1260680 Cross-References: CVE-2025-70888 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This...
OPENSUSE-SU-2026:10482-1 osslsigncode-2.13-1.1 on GA media
These are all security issues fixed in the osslsigncode-2.13-1.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2025-70888
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component CVE-2025-70888...
SUSE CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
CVE-2025-70888
A flaw was found in osslsigncode. A remote attacker can exploit an issue within the osslsigncode.c component to escalate privileges. This vulnerability allows an attacker to gain elevated access, potentially leading to unauthorized control over the affected system...
EUVD-2025-209012
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
DEBIAN-CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
UBUNTU-CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
CVE-2025-70888
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component...
CVE-2025-70888
The CVE-2025-70888 issue affects osslsigncode in mtrojnar’s OSSLSIGNCODE up to version 2.10, with a remote-exploitation vector and a CRITICAL CVSS 9.8 rating. OpenSUSE advisories note fixes in osslsigncode 2.13 that address integer overflows in APPX data streams, double-free vulnerabilities in AP...
osslsigncode 安全漏洞
Osslsigncode is a small tool developed by Michał Trojnara as an individual project. It implements some functions of the Microsoft tool signtool.exe. Versions of Osslsigncode 2.10 and earlier contained security vulnerabilities; these vulnerabilities were caused by issues with the osslsigncode.c...
PT-2026-28088
Name of the Vulnerable Software and Affected Versions mtrojnar Osslsigncode versions prior to 2.10 Description A flaw exists in mtrojnar Osslsigncode that could allow a remote attacker to gain higher system privileges. This issue is related to the osslsigncode.c component. Recommendations Update ...
