474653 matches found
crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages
A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
EUVD-2026-107540
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during the login process. Thi...
CVE-2026-114438 Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during the login process. Thi...
CVE-2026-114438
The Keycloak identity and access management solution contains a flaw in the Update User Locale required action. If this action is ordered before the Configure OTP action within a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during login. This allows an at...
CVE-2026-114438
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during the login process. Thi...
crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages
A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...
CLSA-2025-1754037789 Fix CVE(s): CVE-2025-21760, CVE-2025-21761, CVE-2025-21762, CVE-2025-21764
Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21760 // CVE-url: https://ubuntu.com/security/CVE-2025-21760 - ndisc: extend RCU protection in ndiscsendskb Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21761 // CVE-url:...
CLSA-2026-1792602316 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.37-tuxcare.13...
CLSA-2026-1792601588 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 3 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.2...
CLSA-2026-1792601217 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 3 CVEs. Fixed in 6.1.7-tuxcare.8...
CLSA-2026-1792601132 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.33-tuxcare.3...
CLSA-2026-1792600686 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.13-tuxcare.2...
CLSA-2026-1792600685 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 5 CVEs. Fixed in 6.1.14-tuxcare.3...
CLSA-2026-1792600502 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.15-tuxcare.6...
CLSA-2026-1792600478 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 3 CVEs. Fixed in 6.1.4-tuxcare.8...
CLSA-2026-1792600420 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 7 CVEs. Fixed in 6.0.15-tuxcare.5...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...