Filtered by vendor Debian Subscriptions
Filtered by product Reprepro Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2007-4739 1 Debian 1 Reprepro 2024-08-07 N/A
reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command.