Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 07:17:36 +0000 cnvd-2017-03116 https://cve.radiocsirt.org/vuln/cnvd-2017-03116 cnvd-2017-03116 https://cve.radiocsirt.org/vuln/cnvd-2017-03116 EUVD-2026-72474 https://cve.radiocsirt.org/vuln/euvd-2026-72474 EUVD-2026-72474 https://cve.radiocsirt.org/vuln/euvd-2026-72474 fkie_cve-2017-2623 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2623 <p>It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default.</p> <p>It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-2623 GHSA-v473-h83f-x76x https://cve.radiocsirt.org/vuln/ghsa-v473-h83f-x76x <p>It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default.</p> <p>It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default.</p> https://cve.radiocsirt.org/vuln/ghsa-v473-h83f-x76x gsd-2017-2623 https://cve.radiocsirt.org/vuln/gsd-2017-2623 gsd-2017-2623 https://cve.radiocsirt.org/vuln/gsd-2017-2623 RHSA-2017:0444 — Red Hat Security Advisory: rpm-ostree and rpm-ostree-client security, bug fix, and enhancement update https://cve.radiocsirt.org/vuln/rhsa-2017:0444 <p>rpm-ostree-client: fails to check gpg package signatures when layering</p> <p>rpm-ostree-client: fails to check gpg package signatures when layering</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0444