xzbot

xzbot xz 백도어 탐구 CVE-2024-3094backdoor 다음 내용을 포함합니다: honeypot: 공격 시도를 탐지하기 위한 가짜 취약 서버 ed448 patch: 우리의 ED448 공개 키를 사용하도록 liblzma.so 패치 backdoor format: 백도어 페이로드의 형식 backdoor demo: ED448 개인 키를 알고 있다고 가정하고 RCE를 트리거하는 CLI honeypot openssh.patch 파일을 참조하세요. 이는 백도어 형식과 일치하는 공개 키 N을 가진 연결 시도를 기록하는 간단한...

ALPINE-CVE-2025-15469

Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms such as Ed25519, Ed448, or ML-DSA m...

CVE-2025-15469

Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms such as Ed25519, Ed448, or ML-DSA m...

CVE-2025-15469 'openssl dgst' one-shot codepath silently truncates inputs >16MB

Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms such as Ed25519, Ed448, or ML-DSA m...

Exploit for Embedded Malicious Code in Tukaani Xz

xzbot Exploration of the xz backdoorhttps://www.openwall.c...

PT-2022-37248 · Git +1 · Wolfssl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details include the involvement of specific function names such as wc Shake256 Final, wc...

openssl security and bug fix update

1.1.1c-15 - add selftest of the RANDDRBG implementation 1.1.1c-14 - fix incorrect error return value from FIPSselftestdsa - S390x: properly restore SIGILL signal handler 1.1.1c-12 - additional fix for the edk2 build 1.1.1c-9 - disallow use of SHA-1 signatures in TLS in FIPS mode 1.1.1c-8 - fix...