Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-70888

Опубликовано: 25 мар. 2026
Источник: debian

Описание

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

Пакеты

ПакетСтатусВерсия исправленияРелизТип
osslsigncodefixed2.11-1package
osslsigncodeno-dsatrixiepackage
osslsigncodeno-dsabookwormpackage
osslsigncodepostponedbullseyepackage

Примечания

  • https://github.com/mtrojnar/osslsigncode/issues/475

  • https://github.com/mtrojnar/osslsigncode/pull/477

  • Fixed by: https://github.com/mtrojnar/osslsigncode/commit/d787541107d4c7d43e411b18b209f125632718cd (2.11)

Связанные уязвимости

CVSS3: 9.8
ubuntu
5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVSS3: 10
redhat
5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVSS3: 9.8
nvd
5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

msrc
5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

suse-cvrf
4 месяца назад

Security update for osslsigncode