Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.10 Security Update

New Red Hat build of Keycloak 26.2.10 packages are available from the Customer Portal Red Hat build of Keycloak 26.2.10 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

Important: edk2

Issue Overview: A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERALNAMEcmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to...

CVE-2022-36324

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack...

spice: Client initiated renegotiation denial of service

A flaw was found in spice. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...

OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities

The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service DoS attacks and bypass certificate verification. Tracked as CVE-2021-3449 and CVE-2021-3450 , both the vulnerabilities have been resolved in a...