rpm package
opensuse/signing-party&distro=openSUSE Leap 15.0
pkg:rpm/opensuse/signing-party&distro=openSUSE%20Leap%2015.0
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-11627 | Cri | 9.8 | < 2.7-lp150.5.1 | 2.7-lp150.5.1 | Apr 30, 2019 | gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. |
- affected < 2.7-lp150.5.1fixed 2.7-lp150.5.1
gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID.