https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T21:34:39.307604+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:1067 ALSA-2023:1067 — Important: pesign security update 2026-10-16T21:34:39.319241+00:00

Affected: AlmaLinux:9: pesign

The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.

Security Fix(es):

* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-00640 bdu:2023-00640 2026-10-16T21:34:39.319290+00:00 bdu:2023-00640 https://cve.radiocsirt.org/vuln/euvd-2026-225385 EUVD-2026-225385 2026-10-16T21:34:39.319306+00:00 EUVD-2026-225385 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3560 fkie_cve-2022-3560 2026-10-16T21:34:39.319318+00:00

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.

 https://cve.radiocsirt.org/vuln/ghsa-w2gm-3gx9-m2p2 GHSA-w2gm-3gx9-m2p2 2026-10-16T21:34:39.319340+00:00

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.

 https://cve.radiocsirt.org/vuln/gsd-2022-3560 gsd-2022-3560 2026-10-16T21:34:39.319355+00:00 gsd-2022-3560 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3560 msrc_CVE-2022-3560 — A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service… 2026-10-16T21:34:39.319365+00:00 msrc_CVE-2022-3560 https://cve.radiocsirt.org/vuln/oesa-2023-1119 OESA-2023-1119 — pesign security update 2026-10-16T21:34:39.319381+00:00

Affected: openEuler:20.03-LTS-SP1: pesign, openEuler:20.03-LTS-SP3: pesign, openEuler:22.03-LTS: pesign

pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications. Security Fix(es): A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12672-1 openSUSE-SU-2024:12672-1 — pesign-113-11.1 on GA media 2026-10-16T21:34:39.319406+00:00

pesign-113-11.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:1065 RHSA-2023:1065 — Red Hat Security Advisory: pesign security update 2026-10-16T21:34:39.319421+00:00

pesign: Local privilege escalation on pesign systemd service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3560 UBUNTU-CVE-2022-3560 2026-10-16T21:34:39.319434+00:00

Affected: Ubuntu:16.04:LTS: pesign, Ubuntu:18.04:LTS: pesign, Ubuntu:20.04:LTS: pesign, Ubuntu:22.04:LTS: pesign, Ubuntu:24.04:LTS: pesign, Ubuntu:25.10: pesign, Ubuntu:26.04:LTS: pesign

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0577 WID-SEC-W-2023-0577 — Red Hat Enterprise Linux (pesign): Schwachstelle ermöglicht Privilegieneskalation 2026-10-16T21:34:39.319460+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in "pesign" ausnutzen, um seine Privilegien zu erhöhen.