Implementing and Evaluating Post-Quantum DNSSEC in CoreDNS

The emergence of quantum computers poses a significant threat to current secure service, application and/or protocol implementations that rely on RSA and ECDSA algorithms, for instance DNSSEC, because public-key cryptography based on number factorization or discrete logarithm is vulnerable to...

CVE-2025-23364

A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations...

kernel security update

4.18.0-553.60.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

CVE-2025-23364

A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations...

CVE-2025-23364

A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations...

CVE-2025-23364

A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations...

CVE-2025-23364

Siemens TIA Administrator (all versions before 3.0.6) contains a vulnerability where code signing certificates are not properly validated. This could allow bypassing the certificate check and executing arbitrary code during installation. The issue is documented across multiple sources (e.g., Red ...

CVE-2025-23364

A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations...

Siemens TIA Administrator 数据伪造问题漏洞

Siemens TIA Administrator is a management program for authorizing and licensing SIMATIC products from Siemens, Germany. A data forgery vulnerability exists in Siemens TIA Administrator, which arises from improper validation of code signing certificates and can be exploited by an attacker to bypas...

Oracle Linux 10 : kernel (ELSA-2025-10371)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10371 advisory. 6.12.0-55.20.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

CVE-2025-23364: Improper Verification of Cryptographic Signature

A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations...

PT-2025-28389 · Unknown · Tia Administrator

Name of the Vulnerable Software and Affected Versions: TIA Administrator versions prior to 3.0.6 Description: A vulnerability has been identified in the affected application, where it improperly validates code signing certificates. This could allow an attacker to bypass the check and execute...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 bsc1240366. Backport mdless cms signing support jscPED-12895 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

SUSE-SU-2025:02236-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 bsc1240366. - Backport mdless cms signing support jscPED-12895...

CLSA-2025-1751888871 openssl: Fix of CVE-2024-13176

CVE-2024-13176: fix timing side-channel in ECDSA signature computation...

Oracle Linux 10 : kernel (ELSA-2025-7956)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7956 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 10 : kernel (ELSA-2025-9079)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9079 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 10 : kernel (ELSA-2025-7501)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7501 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug:...

Oracle Linux 10 : kernel (ELSA-2025-8669)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8669 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Oracle Linux 10 : kernel (ELSA-2025-8374)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8374 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...