Vulnerabilities (CVE)

Filtered by vendor Debian Subscribe
Filtered by product Reprepro
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-4739 1 Debian 1 Reprepro 2024-02-28 5.0 MEDIUM N/A
reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command.