Loading...
Loading...
SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slackware mirror sites or man-in-the-middle attackers to cause a denial of service (data inconsistency) or possibly install Trojan horse packages via malformed gpg signatures.
June 29, 2007
April 23, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2007-3499
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.