https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:53:28 +0000 https://cve.radiocsirt.org/vuln/cve-2026-81714 <p><strong>Affected:</strong> jahlives openssl_encrypt</p> <p>openssl_encrypt (pip: openssl-encrypt) versions &lt;= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who confirms a short (forgeable, ~32-bit) GPG key id could unknowingly enroll an attacker&#39;s colliding key as a trusted anchor, which then vouches for malicious plugins under the ENFORCE signature policy. Version 1.4.9 fixes this by requiring the confirmed value to exactly match the full primary-key fingerprint (case-insensitive, whitespace-stripped).</p> <p><strong>Affected:</strong> jahlives openssl_encrypt</p> <p>openssl_encrypt (pip: openssl-encrypt) versions &lt;= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who confirms a short (forgeable, ~32-bit) GPG key id could unknowingly enroll an attacker&#39;s colliding key as a trusted anchor, which then vouches for malicious plugins under the ENFORCE signature policy. Version 1.4.9 fixes this by requiring the confirmed value to exactly match the full primary-key fingerprint (case-insensitive, whitespace-stripped).</p> https://cve.radiocsirt.org/vuln/cve-2026-81714