https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T08:25:14.287869+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-14855 CVE-2019-14855 2026-10-04T08:25:14.292685+00:00

Affected: Red Hat gnupg2

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.

 https://vulnerability.circl.lu/vuln/usn-4516-1 USN-4516-1 — gnupg2 vulnerability 2026-10-04T08:25:14.292799+00:00

Affected: Ubuntu:18.04:LTS: gnupg2

It was discovered that GnuPG signatures could be forged when the SHA-1 algorithm is being used. This update removes validating signatures based on SHA-1 that were generated after 2019-01-19. In environments where this is still required, a new option --allow-weak-key-signatures can be used to revert this behaviour.