5.3
Medium
CVE-2019-14855 A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm
Description
A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gnupg2 | 2.2.18 | No fix stated |
References
- USN-4516-1 usn.ubuntu.com
- rwc.iacr.org rwc.iacr.org
- bugzilla.redhat.com bugzilla.redhat.com
- lists.gnupg.org lists.gnupg.org
- dev.gnupg.org dev.gnupg.org
Timeline
- Published
- Last modified