Beveiligingsadvies

CVE-2025-0509

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-04 20:01:08
Laatst bijgewerkt 2025-02-17 12:03:46
Toegewezen door fedora
CVSS-score 7.3
Status PUBLISHED

Beschrijving

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.