wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use

A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption...

CentOS: Security Advisory for bind (CESA-2020:2383)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

keycloak: missing signatures validation on CRL used to verify client certificates

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself CDP or through the separately configured path. The CRL are often availab...

[SECURITY] Fedora 31 Update: bind-9.11.19-1.fc31

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Important: kernel

Issue Overview: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4xattrsetentry use-after-free in fs/ext4/xattr.c when a large oldsize value is used in a memset call.CVE-2019-19319 In the Linux...

Important: kernel

Issue Overview: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4xattrsetentry use-after-free in fs/ext4/xattr.c when a large oldsize value is used in a memset call.CVE-2019-19319 In the Linux...

RHEL 7 : bind (RHSA-2020:2344)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2344 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...

The vulnerability of the Node.js software platform, related to insufficient validation of input data during the processing of HTTP headers, allows a hacker to gain full control over the application.

The vulnerability of the Node.js software platform is related to insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability allows a malicious actor to gain full control over an application through various network protocols...

The vulnerability of the Advanced Management Console component of the Java SE software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Advanced Management Console component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through various network...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

The vulnerability of the GraalVM Compiler component of the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the GraalVM Compiler component in Oracle GraalVM Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to trigger service failures through various network protocols...

The vulnerability of the Scripting component in Java SE and Java SE Embedded software platforms allows attackers to trigger a service failure.

The vulnerability of the Scripting component in Java SE and Java SE Embedded programming platforms is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service failures through various network protocols...

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms allows a attacker to trigger a service failure.

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to cause service failures through various network protocols...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

[SECURITY] Fedora 32 Update: bind-9.11.19-1.fc32

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster, which allows attackers to trigger service interruptions.

Vulnerability of the Cluster component: The general system management for Oracle databases and MySQL Cluster is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using various network protocols...

wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use

A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption...

SUSE-SU-2020:1486-1 Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92129 fixes several issues. The following security issues were fixed: - CVE-2020-12653: Fixed a buffer overflow in mwifiexcmdappendvsietlv which could have allowed local users to gain privileges or cause a denial of service bsc1171254. - CVE-2020-12654:...

SUSE-SU-2020:1452-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19740 fixes several issues. The following security issues were fixed: - CVE-2020-12653: Fixed a buffer overflow in mwifiexcmdappendvsietlv which could have allowed local users to gain privileges or cause a denial of service bsc1171254. - CVE-2020-12654:...

OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Concurrency. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multipl...