EUVD-2020-20574

Malware in sbrugna...

EUVD-2017-0285

Malware in sbrugna...

EUVD-2021-1934

Malware in sbrugna...

EUVD-2016-3217

Malware in sbrugna...

EUVD-2018-2476

Malware in sbrugna...

EUVD-2018-2478

Malware in sbrugna...

kernel security update

4.18.0-553.78.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security update

5.14.0-570.51.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Why Software Signing (Still) Matters: Trust Boundaries in the Software Supply Chain

Software signing provides a formal mechanism for provenance by ensuring artifact integrity and verifying producer identity. It also imposes tooling and operational costs to implement in practice. In an era of centralized registries such as PyPI, npm, Maven Central, and Hugging Face, it is...

EUVD-2024-38616

Malicious code in bioql PyPI...

EUVD-2022-6422

Malicious code in bioql PyPI...

EUVD-2023-44015

Malicious code in bioql PyPI...

EUVD-2024-20788

Malicious code in bioql PyPI...

EUVD-2024-16696

Malicious code in bioql PyPI...

EUVD-2025-19636

Malicious code in bioql PyPI...

EUVD-2022-0213

Malicious code in bioql PyPI...

EUVD-2022-6732

Malicious code in bioql PyPI...

EUVD-2021-30377

Malicious code in bioql PyPI...

EUVD-2025-3623

Malicious code in bioql PyPI...

EUVD-2025-4795

Malicious code in bioql PyPI...