Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix null pointer dereference in sevplatformshutdownlocked The SEV platform device can be shut down using a null pspmaster; for example, by calling DEBUGTESTDRIVERREMOVE. This issue was identified via KASAN: 137.1482...

Malicious code in ksai-kas-ahakaoliaaji (npm)

Source: amazon-inspector 30bff598dfe158fad783c53b6eb2f50467b163ec46820f144dffd6ec52474443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fixed a use-after-free in bondxmitbroadcast. bondxmitbroadcast reuses the original skb for the last slave determined by bondislastslave and clones it for others. Concurrent slave enslave/release operations may mutat...

kas Persistently Disables SSH Host Key Checking

Summarykas persistently disables SSH host key checking for the invoking user when internal SSH key setup is triggered via SSHPRIVATEKEY or SSHPRIVATEKEYFILE and no user-specific SSH configuration file exists so far.When this path is used, kas creates /.ssh/config with a global Host rule containin...

PYSEC-2026-3855 kas Persistently Disables SSH Host Key Checking

Summary kas persistently disables SSH host key checking for the invoking user when internal SSH key setup is triggered via SSHPRIVATEKEY or SSHPRIVATEKEYFILE and no user-specific SSH configuration file exists so far. When this path is used, kas creates /.ssh/config with a global Host rule...

kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)

kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: OSV:PYSEC-2026-3855...

GHSA-6MXV-C89J-2494 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-kas, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-cng, gitlab-rails-ce, gitlab-runner...

CVE-2026-77801 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-kas, gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-cng, gitlab-rails-ce, gitlab-runner...

CVE-2026-77801 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-kas...

GHSA-6MXV-C89J-2494 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-kas...

kas (>=0.3.0, <=0.10.1), kas-core (>=0.10.0, <=0.10.1) +3 more potentially affected by unknown CVE via stack_dst (0.6.1)

stackdst CARGO version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on stackdst and may be impacted: - kas =0.3.0, =0.10.0, =0.3.0, =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0272...

CVE-2026-54548

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

GHSA-MV8M-V9V6-5F94 kas Persistently Disables SSH Host Key Checking

Summary kas persistently disables SSH host key checking for the invoking user when internal SSH key setup is triggered via SSHPRIVATEKEY or SSHPRIVATEKEYFILE and no user-specific SSH configuration file exists so far. When this path is used, kas creates /.ssh/config with a global Host rule...

kas Persistently Disables SSH Host Key Checking

Summary kas persistently disables SSH host key checking for the invoking user when internal SSH key setup is triggered via SSHPRIVATEKEY or SSHPRIVATEKEYFILE and no user-specific SSH configuration file exists so far. When this path is used, kas creates /.ssh/config with a global Host rule...

kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)

kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: OSV:GHSA-MV8M-V9V6-5F94...

EUVD-2026-66560

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

CVE-2026-54548 kas: Persistent SSH Host Key Checking Disablement

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

CVE-2026-54548

kas is a setup tool for bitbake-based projects. Prior to version 5.4 , when internal SSH key setup is triggered via SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE and no user-specific SSH configuration exists, the function ssh_no_host_key_check() in kas/libcmds.py creates ~/.ssh/config with a global Hos...

CVE-2026-54548 kas: Persistent SSH Host Key Checking Disablement

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

CVE-2026-54548

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...