Bug 2549509 (CVE-2026-103902)
| Summary: | CVE-2026-103902 libdigidocpp: libdigidocpp: Digital signature forgery via improper signature verification | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in libdigidocpp. A remote attacker can create forged digital signatures that are improperly verified and incorrectly displayed as valid. This flaw allows an attacker to bypass signature validation checks and present fraudulent or altered documents as authentic.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2550235 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-12 10:31:27 UTC
|