Malware in a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaf4a9b8797a44e404e0191319882ef754eb4881f5a1cc40868b811f37aae2c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17958 Malicious code in a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaf4a9b8797a44e404e0191319882ef754eb4881f5a1cc40868b811f37aae2c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between th...

Apache Kylin security vulnerabilities

A security vulnerability exists in Apache Kylin versions 4.0.0 through 5.0.4. It stems from improper validation of JDBC source configurations; when the Kylin backend service is exposed to the public network, this may lead to minor impacts...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: net: hso: Fix null-ptr-deref during tty device unregistration Multiple ttys attempt to claim the same minor number, resulting in a double unregistration of the same device. The first unregistration succeeds, but the next attempt...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Misc: ocxl: fixed a possible double-free in ocxlfileregisterafu. inforelease will be called in deviceunregister when the reference count of info-dev is 0. Therefore, there is no need to call ocxlafuput and kfree again. This issue...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: uio: Fixed a use-after-free in uioopen. core-1 core-2 ------------------------------------------------------- uiounregisterdevice uioopen idev = idrfind deviceunregister&idev-dev putdevice&idev-dev uiodevicerelease...

MINI-9P8P-RW9J-6RPR

Bulletin has no description...

MINI-84Q4-H4HP-RVR5

Bulletin has no description...

MINI-4X8F-QGFM-6CHJ

Bulletin has no description...

MINI-VGJM-VQ6V-M8RR

Bulletin has no description...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The maximum minor value is set to blkallocextminor. The idaallocrange... min, max,... function returns values ranging from min to max, including both ends. Therefore, NREXTDEVT is a valid index returned by blkallocextminor. This ...

BIT-POSTGRESQL-2026-14673 PostgreSQL amcheck does not clear untrusted search path

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...

SUSE CVE-2026-16238

Type confusion in PostgreSQL pgrestoreattributestats allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

PT-2026-71477

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 17.0 through 17.10 PostgreSQL versions 18.0 through 18.4 Description Improper enforcement of message integrity in GSSAPI support allows a user to negotiate GSSAPI in a manner that contradicts pg hba.conf rules during an...

CVE-2026-68494

This CVE notes an incomplete fix for CVE-2026-18401 in jackson-core’s non-blocking parser, leaving a remaining bypass for number-length constraints when data is streamed in many small chunks. The issue arises in the async parser path (MINOR_NUMBER_INTEGER_DIGITS) where validateIntegerLength() is ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.69 security and extras update

Red Hat OpenShift Container Platform release 4.13.69 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...

PYSEC-2026-686 OpenStack Neutron Race Condition vulnerability

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0:...