Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Debian Subscribe
Filtered by product Reprepro
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-4739 1 Debian 1 Reprepro 2009-02-04 5.0 MEDIUM N/A
reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command.