pam security update

An update is available for pam. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Pluggable Authentication Modules PAM provide a system to set up authentication...

RLSA-2026:56131 Moderate: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 For more details about the...

Redis_Pwn

Redis Rogue PWN Enhanced Redis rogue server exploit for CTF...

MAL-2026-14261 Malicious code in postcss-initialize-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85729e0f775f02486ef631437f648a1661eced789fa66656248f9d4078ac3f16 [email protected] presents itself as a PostCSS plugin README, badges, and repository links reference the legitimate...

Malicious code in postcss-initialize-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85729e0f775f02486ef631437f648a1661eced789fa66656248f9d4078ac3f16 [email protected] presents itself as a PostCSS plugin README, badges, and repository links reference the legitimate...

CVE-2026-72224

A flaw was found in the Linux kernel's nvdimm/btt module. During the initialization of the Block Translation Table BTT via bttinit, memory allocated for arenas is not properly released if an error occurs. This oversight can lead to a memory leak, potentially impacting system stability or...

CVE-2026-50243

A flaw in Unbound's respip module fails to verify the security status of incoming DNS answers when using response-ip rules or RPZ files. A remote attacker can exploit this by spoofing DNS answers to bypass DNSSEC protections and trigger unauthorized rewrites, redirecting clients to unintended...

CVE-2026-72152

A flaw was found in the Linux kernel's Trusted Platform Module TPM TIS SPI driver. The waiteventinterruptibletimeout function incorrectly evaluates its condition after setting the task state, which can trigger a warning when debugging atomic sleeps and using the Interrupt Request IRQ wait path...

Malicious code in modsync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b786780800de5689c4ae50377166b26050fd688ec5d75cfb14fda990b92494 The package presents itself as a pino-like logger/middleware README, docs/, and index.d.ts copied from pinojs/pino; keywords fast/logger/stream/json...

MAL-2026-14257 Malicious code in modsync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b786780800de5689c4ae50377166b26050fd688ec5d75cfb14fda990b92494 The package presents itself as a pino-like logger/middleware README, docs/, and index.d.ts copied from pinojs/pino; keywords fast/logger/stream/json...

CVE-2026-74797

A flaw was found in OpenTofu. A remote attacker could exploit this vulnerability by providing maliciously-crafted .zip archives during the tofu init command, which is used for provider or module package initialization. This could lead to excessive CPU usage, causing a Denial of Service DoS by...

Malicious code in api-rs-tuils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e65df9ad10889610f658c482041bdcf8c06d3c147da5cec709f246a1fa363c4 [email protected] runs a malicious postinstall hook node test.js that executes obfuscated code in index.js against the installer's machine. The code...

MAL-2026-14256 Malicious code in api-rs-tuils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e65df9ad10889610f658c482041bdcf8c06d3c147da5cec709f246a1fa363c4 [email protected] runs a malicious postinstall hook node test.js that executes obfuscated code in index.js against the installer's machine. The code...

Malicious code in ranux-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2844c37c95371d0fa96d0a814be948335590d5b65500a8f4b2a577c8748e23 The package main index.js is obfuscator.io-transformed with a rotated string-array decoder and, at top level, uses createDecipheriv with a hardcoded...

MAL-2026-14258 Malicious code in ranux-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2844c37c95371d0fa96d0a814be948335590d5b65500a8f4b2a577c8748e23 The package main index.js is obfuscator.io-transformed with a rotated string-array decoder and, at top level, uses createDecipheriv with a hardcoded...

CVE-2026-72117

A flaw was found in the Linux kernel's CAN Controller Area Network Broadcast Manager BCM module. A data race condition exists in the bcmrxhandler function where the rxstamp and rxifindex values are written without proper locking. This can lead to a "torn store" of the 64-bit rxstamp on 32-bit...

CLSA-2026-1787115093 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.20-tuxcare.1...

Malicious code in react-dom-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae606be0dbd7c79552511c2553ec9e1d081df1279f0bc85502a6c08c0f17fb Package name typosquats react-dom. On require'react-dom-helpers/client', client.js decodes a base64-obfuscated Slack bot token and channel ID,...

MAL-2026-14253 Malicious code in react-dom-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae606be0dbd7c79552511c2553ec9e1d081df1279f0bc85502a6c08c0f17fb Package name typosquats react-dom. On require'react-dom-helpers/client', client.js decodes a base64-obfuscated Slack bot token and channel ID,...

Malicious code in nice-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c88734e4d701b61fd197a942bc057f59c684d4eb9994ca0efc7136dfcf893c9 The npm package [email protected] executes probe.js from its postinstall lifecycle. On install, probe.js issues requests to cloud...