CVE-2025-70888

Опубликовано: 25 мар. 2026

Источник: debian

Описание

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

Пакет	Статус	Версия исправления	Релиз	Тип
osslsigncode	fixed	2.11-1		package
osslsigncode	no-dsa		trixie	package
osslsigncode	no-dsa		bookworm	package

https://github.com/mtrojnar/osslsigncode/issues/475
https://github.com/mtrojnar/osslsigncode/pull/477
Fixed by: https://github.com/mtrojnar/osslsigncode/commit/d787541107d4c7d43e411b18b209f125632718cd (2.11)

CVE-2025-70888

CVSS3: 9.8

ubuntu

8 дней назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVE-2025-70888

CVSS3: 10

redhat

9 дней назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVE-2025-70888

CVSS3: 9.8

nvd

8 дней назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVE-2025-70888

msrc

5 дней назад

Описание отсутствует

GHSA-m387-6h4v-93hp

CVSS3: 9.8

github

8 дней назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component