CVE-2019-12875

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
4
MEDIUM
Affected
1
PROJECT

Description

Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.

sroracle/abuild
sroracle/abuildUNAVAILABLE
Build script to build Alpine packages (mirror)
GitHubGitHub