CoreCVE
Back

MEDIUM

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key

Published Jun 18, 2019

Description

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-668

CWE-862

Missing Authorization

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Jun 18, 2019
Updated Aug 4, 2024
Reserved Jun 18, 2019
Link CVE-2019-12875

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-12875

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Jun 18, 2019
Updated Aug 4, 2024
Link EUVD-2019-4454

GitHub

No data