EUVD-2008-3885

Malware in sbrugna...

EUVD-2021-21038

Malware in sbrugna...

EUVD-2020-15415

Malware in sbrugna...

EUVD-2019-5451

Malware in sbrugna...

EUVD-2021-17592

Malware in sbrugna...

EUVD-2019-5450

Malware in sbrugna...

Unity Linux 20.1070e Security Update: uboot-tools (UTSA-2025-669607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-669607 advisory. An integer overflow in ext4fsreadsymlink in Das U-Boot before 2025.01-rc1 occurs for zalloc adding one to an le32 variable via a crafted ext4 filesystem with an inod...

This Week in Spring - October 7th, 2025

Hi, Spring fans! How're you doing this fantastic October afternoon? I'm on a train returning from Frankfurt, Germany, where I spoke at the Cloud Foundry Day Frankfurt event about how awesome it is to build an application with Spring Boot and Cloud Foundry. Yesterday I was in Antwerp, Belgium, and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not delegating work to the boot CPU, which could lead to a system hang...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414461 advisory. In the linux kernel, if IMA appraisal is used with the imaappraise=log boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or...

Unity Linux 20.1070e Security Update: uboot-tools (UTSA-2025-680593)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680593 advisory. There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986767 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Map EFI-reserved memory as encrypted for SEV Some drivers require memory that is...

kernel security update

4.18.0-553.78.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414675 advisory. The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c a...

Introducing Jackson 3 support in Spring

This is a new blog post in the Road to GA series, this time sharing more details on the new Jackson 3 support, just a few days after Jackson 3.0.0 GA release, about to be introduced in Spring Boot 4 and related Spring portfolio projects. Jackson is by far the most used JSON library on the JVM, an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987149 advisory. In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpiinstallfixedeventhandler...

EUVD-2025-32585

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

CVE-2025-59447

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

CVE-2025-59447

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

PT-2025-40944

Name of the Vulnerable Software and Affected Versions YoSmart YoLink Smart Hub device 0382 Description The device exposes a UART debug interface. An attacker with direct physical access can use this interface to read a boot log, which contains network access credentials. Recommendations At the...