Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/revelation@0.5.5-1?distro=trixie
purl pkg:deb/debian/revelation@0.5.5-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-h8j4-f8gx-zyhy Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack. CVE-2012-2743
VCID-svnn-7j6e-mfg4 Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack. CVE-2012-2742
VCID-wau1-b5hf-aua7 The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allow local users to obtain sensitive information. CVE-2012-3818

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T17:13:38.212788+00:00 Debian Importer Fixing VCID-wau1-b5hf-aua7 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T17:13:38.189657+00:00 Debian Importer Fixing VCID-h8j4-f8gx-zyhy https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T17:13:38.160414+00:00 Debian Importer Fixing VCID-svnn-7j6e-mfg4 https://security-tracker.debian.org/tracker/data/json 38.6.0