https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:13:38.966393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-00237 bdu:2019-00237 2026-10-03T06:13:39.236334+00:00 bdu:2019-00237 https://cve.radiocsirt.org/vuln/bell-cve-2018-12020 Withdrawn: BELL-CVE-2018-12020 — CVE-2018-12020 does not affect BellSoft software 2026-10-03T06:13:39.236381+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2018-avi-277 certfr-2018-avi-277 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu . Elles permettent à un attaquant de provo… 2026-10-03T06:13:39.236401+00:00 certfr-2018-avi-277 https://cve.radiocsirt.org/vuln/cleanstart-2026-hy00225 Withdrawn: CLEANSTART-2026-HY00225 — Security fixes in gnupg 2.2.8-r0 2026-10-03T06:13:39.236416+00:00

Withdrawn by the publisher.

Affected: CleanStart: gnupg

Package gnupg version 2.2.8-r0 fixes 1 vulnerabilities: CVE-2018-12020

 https://cve.radiocsirt.org/vuln/cnvd-2018-21053 cnvd-2018-21053 2026-10-03T06:13:39.236445+00:00 cnvd-2018-21053 https://cve.radiocsirt.org/vuln/euvd-2026-65686 EUVD-2026-65686 2026-10-03T06:13:39.236458+00:00 EUVD-2026-65686 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12020 fkie_cve-2018-12020 2026-10-03T06:13:39.236469+00:00

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.

 https://cve.radiocsirt.org/vuln/ghsa-678p-6r6j-65f9 GHSA-678p-6r6j-65f9 2026-10-03T06:13:39.236493+00:00

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.

 https://cve.radiocsirt.org/vuln/gsd-2018-12020 gsd-2018-12020 2026-10-03T06:13:39.236509+00:00 gsd-2018-12020 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10736-1 openSUSE-SU-2024:10736-1 — enigmail-2.2.4-1.4 on GA media 2026-10-03T06:13:39.236519+00:00

enigmail-2.2.4-1.4 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2018:2180 RHSA-2018:2180 — Red Hat Security Advisory: gnupg2 security update 2026-10-03T06:13:39.236538+00:00

gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification

 https://cve.radiocsirt.org/vuln/suse-su-2018:1696-1 SUSE-SU-2018:1696-1 — Security update for gpg2 2026-10-03T06:13:39.236554+00:00

Security update for gpg2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12020 UBUNTU-CVE-2018-12020 2026-10-03T06:13:39.236569+00:00

Affected: Ubuntu:14.04:LTS: gnupg, Ubuntu:14.04:LTS: gnupg2, Ubuntu:Pro:14.04:LTS: python-gnupg, Ubuntu:16.04:LTS: gnupg, Ubuntu:16.04:LTS: gnupg2, Ubuntu:Pro:16.04:LTS: python-gnupg, Ubuntu:16.04:LTS: enigmail, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: python-gnupg, Ubuntu:18.04:LTS: enigmail and 3 more

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.