CVE-2019-12875

CVE-2019-12875 concerns Alpine Linux abuild up to version 3.4.0. The vulnerability arises because an unprivileged member of the abuild group can misuse a --keys-dir option to cause acceptance of an untrusted signing key, enabling the introduction of an untrusted package. The Red Hat advisory corr...