https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:12:34 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2025-8454 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2025-8454 https://cve.radiocsirt.org/vuln/euvd-2026-248878 EUVD-2026-248878 https://cve.radiocsirt.org/vuln/euvd-2026-248878 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8454 <p>It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.</p> <p>It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8454 https://cve.radiocsirt.org/vuln/ghsa-mw9f-f52p-chpp <p>It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification for files already downloaded even if a previous verification did fail.</p> <p>It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification for files already downloaded even if a previous verification did fail.</p> https://cve.radiocsirt.org/vuln/ghsa-mw9f-f52p-chpp https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8454 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: devscripts, Ubuntu:16.04:LTS: devscripts, Ubuntu:18.04:LTS: devscripts, Ubuntu:20.04:LTS: devscripts, Ubuntu:22.04:LTS: devscripts, Ubuntu:24.04:LTS: devscripts, Ubuntu:25.10: devscripts, Ubuntu:26.04:LTS: devscripts</p> <p>It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: devscripts, Ubuntu:16.04:LTS: devscripts, Ubuntu:18.04:LTS: devscripts, Ubuntu:20.04:LTS: devscripts, Ubuntu:22.04:LTS: devscripts, Ubuntu:24.04:LTS: devscripts, Ubuntu:25.10: devscripts, Ubuntu:26.04:LTS: devscripts</p> <p>It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8454