Moderate: libkcapi security update

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer request...

libkcapi security, bug fix, and enhancement update

1.4.0-3.0.1 - Change distronameext in spec file to oracle 1.4.0-3 - Remove ansicprng test as new kernels don't support it Resolves: RHEL-242707 - Add tag processing in AEAD decryption without ciphertext Resolves: RHEL-242667 - CVE-2026-71226: Fix memory corruption via uncanceled AIO requests on...

ALSA-2026:67265 Moderate: libkcapi security, bug fix, and enhancement update

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer request...

ALSA-2026:67266 Moderate: libkcapi security update

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer request...

RHEL 10 : libkcapi (RHSA-2026:67267)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67267 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

AlmaLinux 8 : libkcapi (ALSA-2026:67266)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67266 advisory. libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries CVE-2026-71225 libkcapi: Memory...

AlmaLinux 10 : libkcapi (ALSA-2026:67267)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67267 advisory. libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries CVE-2026-71225 libkcapi: Memory...

RHEL 8 : libkcapi (RHSA-2026:67266)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67266 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

RHEL 9 : libkcapi (RHSA-2026:67265)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67265 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

ALSA-2026:67267 Moderate: libkcapi security, bug fix, and enhancement update

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer request...

Malicious Package

Overview @postman-cse/okta-aio-darwin-arm64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104542 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async pat...

Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code...

MAL-2026-14580 Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code...

Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a2f9288ce6a37525823a4f4d41e8a4aaeaea4b0c6e18e6a356bd9d6f49162e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview @postman-cse/okta-aio-linux-arm64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-14357 Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a2f9288ce6a37525823a4f4d41e8a4aaeaea4b0c6e18e6a356bd9d6f49162e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

OESA-2026-3440 libkcapi security update

The Linux kernel exports a Netlink interface of type AFALG to allow user space to utilize the kernel crypto API. libkcapi uses this Netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level Netlink interface handling. The library does not implement...

libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...