gopassivedns

gopassivedns Go によるネットワークベースの DNS ログ収集 概要 ネットワークキャプチャに基づく DNS ロガーであり、https://github.com/gamelinux/passivedns に触発されています。gopacket を使用して libpcap とパケット処理を扱います。JSON ログを出力します。高頻度のクエリキャプチャを、1 台から数百台の DNS リゾルバが存在する環境で処理することを目的としています。 なぜ gamelinux の PassiveDNS を使用しないのか？...

research

研究 — Bertoldi Cybersecurity Alessandro Bertoldi と共同研究者による公開済みのセキュリティ研究。 論文 タイトル| イベント| 年| リンク ---|---|---|--- Infinity-Day の大規模化：レジストラの乗っ取り、2FA の回避、17,000 以上のドメインのなりすまし| DeepSec Vienna 2025| 2025| PDF 著者 Infinity-Day の大規模化 DeepSec Vienna 2025 主著者：Alessandro Bertoldi 寄稿者：Enrico Bertoldi、Simon Piet...

Rocky Linux 10.1 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc (crlsa-2025_23201)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523201 advisory. keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration CVE-2025-13609 Tenable has extracted the preceding description block direct...

Rocky Linux 9 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc (crlsa-2025_23210)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523210 advisory. keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration CVE-2025-13609 Tenable has extracted the preceding description block directly...

CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-52023

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the imsregistrarpcscf module, specifically the pcscfsavepending/savepending path and security-agreement parsing in secagree.c:parsesecagree...

CVE-2026-52023

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the imsregistrarpcscf module, specifically the pcscfsavepending/savepending path and security-agreement parsing in secagree.c:parsesecagree...

DEBIAN-CVE-2026-82608

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get4bytes of the file src/modules/imsregistrarscscf/cxdxavp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has bee...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, gpu-operator, seaweedfs-operator, terraform-provider-time-fips, nvidia-nsight-compute-12.9, cluster-proportional-autoscaler-fips, cloud-provider-aws-fips, vitess, iptables-wrappers, kyverno-policy-reporter-plugins-trivy-fips,...

CLEANSTART-2026-IG79399 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r1

Package kubernetes-csi-node-driver-registrar version 2.13.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-YT96362 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r3

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r3 fixes 13 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836...

CLEANSTART-2026-FM34446 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r0

Package kubernetes-csi-node-driver-registrar version 2.13.0-r0 fixes 59 vulnerabilities: CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870...

CLEANSTART-2026-SP49860 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r4

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r4 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-TI99116 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.15.0-r5

Package kubernetes-csi-node-driver-registrar-fips version 2.15.0-r5 fixes 2 vulnerabilities: CVE-2026-25681, CVE-2026-25680...

CLEANSTART-2026-SA81922 Security fixes for CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870, CVE-2025-22871, CVE-2025-22872, CVE-2025-22873, CVE-2025-4673, CVE-2025-4674, CVE-2025-47906, CVE-2025-47907, CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, ghsa-p77j-4mvh-x3m3, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 2.13.0-r0, 2.13.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-node-driver-registrar package. These issues are resolved in later releases. See references for individual vulnerability details...

PYSEC-2026-1488 Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

Impact The Keylime registrar implemented more strict type checking on version 7.12.0. As a result, when updated to version 7.12.0, the registrar will not accept the format of the data previously stored in the database by versions = 7.8.0, raising an exception. This makes the Keylime registrar...

Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

ImpactThe Keylime registrar implemented more strict type checking on version 7.12.0. As a result, when updated to version 7.12.0, the registrar will not accept the format of the data previously stored in the database by versions = 7.8.0, raising an exception.This makes the Keylime registrar...

Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

ImpactKeylime registrar is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port by default, port 8891 blocking further, legitimate connections. As long as the connection is open, the registrar is blocked and cannot serve any further clients agents an...

PYSEC-2026-1489 Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

Impact Keylime registrar is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port by default, port 8891 blocking further, legitimate connections. As long as the connection is open, the registrar is blocked and cannot serve any further clients agents a...