Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Multiple vulnerabilities in OpenSSL have been disclosed, affecting various Ubuntu LTS versions. Key issues include improper handling of certificate revocation lists (CVE-2026-35189), leading to potential denial of service, and timing side-channel attacks due to incorrect scalar multiplication (CVE-2...
Multiple vulnerabilities in OpenSSL affecting Ubuntu 20.04 LTS and other versions have been fixed in the USN-7980-2 update. Key vulnerabilities include CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, and CVE-2026-22796. Users of Ubuntu 20.04 LTS, 18.04...
OpenSSL vulnerabilities were discovered affecting Ubuntu 25.10, 24.04 LTS, and 22.04 LTS. The issues involve incorrect validation of PBMAC1 parameters and parsing of CMS AuthEnvelopedData messages, potentially allowing attackers to cause OpenSSL to crash, resulting in a denial of service. The vulner...
IPFire has released its 200th core update for version 2.29, which includes a kernel upgrade to Linux 6.18.7 LTS, a beta domain blocklist service, and critical security patches for OpenSSL and glibc. The update aims to enhance network performance and security for users of the firewall distribution.