TI-2015-01216 CVE-2015-1337 · GHSA-r4f6-cvp5-f9chSimple Streams (simplestreams) does not properly verify the GPG signatures of disk image…Priority LOW 33Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response…CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01709 · Published 2015-10-09 · No fix listed CWE-20
