kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

EUVD-2018-0790

Malware in sbrugna...

EUVD-2017-15845

Malware in sbrugna...

EUVD-2021-10123

Malware in sbrugna...

EUVD-2019-9877

Malware in sbrugna...

EUVD-2009-0633

Malware in sbrugna...

EUVD-2008-2053

Malware in sbrugna...

EUVD-2017-14269

Malware in sbrugna...

EUVD-2019-16211

Malware in sbrugna...

EUVD-2018-1104

Malware in sbrugna...

EUVD-2019-4247

Malware in sbrugna...

EUVD-2019-10514

Malware in sbrugna...

EUVD-2020-27014

Malware in sbrugna...

EUVD-2018-1054

Malware in sbrugna...

EUVD-2017-10483

Malware in sbrugna...

EUVD-2020-24819

Malware in sbrugna...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeated client-initiated TLS renegotiation requests. An attacker can exhaust server CPU resources by sending multiple renegotiation requests over unauthenticated connections. Not...

The vulnerability of the tls_rx_msg_size() function in the Linux kernel’s TLS component allows a attacker to cause a service failure.

The vulnerability of the tlsrxmsgsize function in the Linux kernel’s TLS component is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: httpd (UTSA-2025-987456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987456 advisory. In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTT...

Akka.Remote TLS did not properly implement certificate-based authentication

This is a critical network security vulnerability for Akka.Remote users who have SSL / TLS enabled on their Akka.Remote connections and were expecting certificate-based authentication to be enforced on all peers attempting to join the network. In all versions of Akka.Remote from v1.2.0 to v1.5.51...