https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:13:33 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:4490 <p><strong>Affected:</strong> AlmaLinux:8: gnupg2, AlmaLinux:8: gnupg2-smime</p> <p>The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.</p> <p>The following packages have been upgraded to a later upstream version: gnupg2 (2.2.20). (BZ#1663944)</p> <p>Security Fix(es):</p> <p>* GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS (CVE-2019-13050)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: gnupg2, AlmaLinux:8: gnupg2-smime</p> <p>The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.</p> <p>The following packages have been upgraded to a later upstream version: gnupg2 (2.2.20). (BZ#1663944)</p> <p>Security Fix(es):</p> <p>* GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS (CVE-2019-13050)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:4490 https://cve.radiocsirt.org/vuln/bdu:2019-02942 bdu:2019-02942 https://cve.radiocsirt.org/vuln/bdu:2019-02942 https://cve.radiocsirt.org/vuln/euvd-2026-55393 EUVD-2026-55393 https://cve.radiocsirt.org/vuln/euvd-2026-55393 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13050 <p>Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.</p> <p>Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-13050 https://cve.radiocsirt.org/vuln/ghsa-ch5h-mpfr-fhxh <p>Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.</p> <p>Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.</p> https://cve.radiocsirt.org/vuln/ghsa-ch5h-mpfr-fhxh https://cve.radiocsirt.org/vuln/gsd-2019-13050 gsd-2019-13050 https://cve.radiocsirt.org/vuln/gsd-2019-13050 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1917-1 <p>Security update for gpg2</p> <p>Security update for gpg2</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1917-1 https://cve.radiocsirt.org/vuln/suse-su-2019:2006-1 <p>Security update for gpg2</p> <p>Security update for gpg2</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2006-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13050 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:16.04:LTS: sks, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: sks, Ubuntu:20.04:LTS: sks</p> <p>Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:16.04:LTS: sks, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: sks, Ubuntu:20.04:LTS: sks</p> <p>Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13050 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227