https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:53:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00237 bdu:2019-00237 https://cve.radiocsirt.org/vuln/bdu:2019-00237 https://cve.radiocsirt.org/vuln/bell-cve-2018-12020 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-12020 https://cve.radiocsirt.org/vuln/certfr-2018-avi-277 certfr-2018-avi-277 https://cve.radiocsirt.org/vuln/certfr-2018-avi-277 https://cve.radiocsirt.org/vuln/cleanstart-2026-hy00225 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: gnupg</p> <p>Package gnupg version 2.2.8-r0 fixes 1 vulnerabilities: CVE-2018-12020</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: gnupg</p> <p>Package gnupg version 2.2.8-r0 fixes 1 vulnerabilities: CVE-2018-12020</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-hy00225 https://cve.radiocsirt.org/vuln/cnvd-2018-21053 cnvd-2018-21053 https://cve.radiocsirt.org/vuln/cnvd-2018-21053 https://cve.radiocsirt.org/vuln/euvd-2026-65686 EUVD-2026-65686 https://cve.radiocsirt.org/vuln/euvd-2026-65686 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12020 <p>mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the &#34;--status-fd 2&#34; option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.</p> <p>mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the &#34;--status-fd 2&#34; option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12020 https://cve.radiocsirt.org/vuln/ghsa-678p-6r6j-65f9 <p>mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the &#34;--status-fd 2&#34; option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.</p> <p>mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the &#34;--status-fd 2&#34; option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.</p> https://cve.radiocsirt.org/vuln/ghsa-678p-6r6j-65f9 https://cve.radiocsirt.org/vuln/gsd-2018-12020 gsd-2018-12020 https://cve.radiocsirt.org/vuln/gsd-2018-12020 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10736-1 <p>enigmail-2.2.4-1.4 on GA media</p> <p>enigmail-2.2.4-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10736-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2180 <p>gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification</p> <p>gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2180 https://cve.radiocsirt.org/vuln/suse-su-2018:1696-1 <p>Security update for gpg2</p> <p>Security update for gpg2</p> https://cve.radiocsirt.org/vuln/suse-su-2018:1696-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12020 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: gnupg, Ubuntu:14.04:LTS: gnupg2, Ubuntu:Pro:14.04:LTS: python-gnupg, Ubuntu:16.04:LTS: gnupg, Ubuntu:16.04:LTS: gnupg2, Ubuntu:Pro:16.04:LTS: python-gnupg, Ubuntu:16.04:LTS: enigmail, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: python-gnupg, Ubuntu:18.04:LTS: enigmail and 3 more</p> <p>mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the &#34;--status-fd 2&#34; option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: gnupg, Ubuntu:14.04:LTS: gnupg2, Ubuntu:Pro:14.04:LTS: python-gnupg, Ubuntu:16.04:LTS: gnupg, Ubuntu:16.04:LTS: gnupg2, Ubuntu:Pro:16.04:LTS: python-gnupg, Ubuntu:16.04:LTS: enigmail, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: python-gnupg, Ubuntu:18.04:LTS: enigmail and 3 more</p> <p>mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the &#34;--status-fd 2&#34; option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12020