← All advisories

High severity7.5NVD Advisory· Published Jun 4, 2021· Updated Jun 17, 2026

CVE-2021-28091

CVE-2021-28091

Description

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

Lasso/Lassodescription
Entrouvert/Lassollm-fuzzy
Range: <2.7.0
osv-coords7 versions
pkg:rpm/almalinux/lasso pkg:rpm/almalinux/lasso-devel pkg:rpm/opensuse/lasso&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/lasso&distro=openSUSE%20Tumbleweed pkg:rpm/suse/lasso&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/lasso&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/lasso&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 2.6.0-12.el8+ 6 more
- (no CPE)range: < 2.6.0-12.el8
- (no CPE)range: < 2.6.0-12.el8
- (no CPE)range: < 2.6.1-lp152.2.3.1
- (no CPE)range: < 2.7.0-2.2
- (no CPE)range: < 2.6.1-8.7.2
- (no CPE)range: < 2.6.1-8.7.2
- (no CPE)range: < 2.6.1-8.7.2

Patches

Vulnerability mechanics

References

7

git.entrouvert.org/lasso.git/commit/nvdPatchVendor Advisory
git.entrouvert.org/lasso.git/tree/NEWSnvdRelease NotesVendor Advisory
lists.debian.org/debian-lts-announce/2021/06/msg00013.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2021/dsa-4926nvdThird Party Advisory
listes.entrouvert.com/arc/lasso/nvdProduct
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SI4YAQF4VEV2KHQ6OXXZL7CJK7IZQ3EG/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YSVWOHBBWLI2RB5C6TXINFEJRT4YSD3D/nvd

News mentions

0

No linked articles in our index yet.