Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| kas | fixed | 5.3-1 | package | |
| kas | no-dsa | trixie | package | |
| kas | not-affected | bookworm | package | |
| kas | not-affected | bullseye | package |
Примечания
https://github.com/siemens/kas/security/advisories/GHSA-4vqc-wpwg-vh7j
Introduced with: https://github.com/siemens/kas/commit/a2480fe59b6421eb96cf3bd86527ae6e412a331e (4.8)
Fixed by: https://github.com/siemens/kas/commit/5b2114becfc154b16ef496d24f8c2191a2297f57 (5.3)
Связанные уязвимости
github
2 месяца назад
kas's late signature validation may allow unnoticed repository manipulations