25 matches found
Adobe Acrobat Reader DC DigSig Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2026-69248 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2026-69248 Source advisory:...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2026-69249 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2026-69249 Source advisory:...
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...
kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2023-50782 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2023-50782 Source advisory:...
RLSA-2026:21557 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183 kernel: mm: thp: deny...
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183...
Linux kernel Data Compromise
The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2026-34073 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2026-34073 Source advisory:...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2026-34073 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2026-34073 Source advisory:...
SUSE-SU-2026:0496-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255594. - CVE-2023-54142: gtp: Fix use-after-free in gtpencapdestroy bsc1256095. -...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255594. CVE-2023-54142: gtp: Fix use-after-free in gtpencapdestroy bsc1256095...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2026-26007 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2026-26007 Source advisory:...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2026-26007 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2026-26007 Source advisory:...
CVE-2025-68183
CVE-2025-68183 is a Linux kernel vulnerability affecting IMA_DIGSIG handling when setting/removing non-IMA xattrs. If both IMA and EVM are in fix mode, IMA signatures can be replaced by IMA hashes on file close, or when security xattrs change (e.g., security.selinux). The issue is fixed by not cl...
CVE-2025-68183 ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...
dbcat (0.3.1), dfnclient (0.4.7) +6 more potentially affected by CVE-2023-50782 via cryptography (3.4.4)
cryptography PYPI version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dbcat 0.3.1 - dfnclient 0.4.7 - digsig =0.0.1b0, =0.2.4, =1.5.4b2, =1.1.0, =1.5.3 Source cves: CVE-2023-50782 Source advisory:...
Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability that could result in the loading of unsigned firmware on boot. An authenticated attacker could exploit this flaw to load malicious firmware onto the device. cisco-sa-20190925-iosxe-digsig-bypass TRUSTED...
fly-admin-digsig Improper Access Control DoS
The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux is related to errors that cause significant time delays when opening a folder with the ELF filter enabled. Exploiting this vulnerability allows an attacker to trigger a service failure...