Vulnerability Bulletins |
CVE-2025-8454 |
|
| Affected software | LINUX DEBIAN |
| It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification for files already downloaded even if a previous verification did fail. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-8454 | |