CVE-2025-8454 – Debian Package devscripts OpenPGP Verification Bypass

CVE ID : CVE-2025-8454

Published : Aug. 1, 2025, 6:15 a.m. | 1 hour, 21 minutes ago

Description : It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification for files already downloaded even if a previous verification did fail.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…