| Package | Affected versions | Patched versions |
|---|---|---|
| gnupg | < 2.2.18 | 2.2.18 |
A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free