The npm package 'test1817' contains malicious code that can fully compromise any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package alone may not eliminate all malicious software, as the attacker may have established persistent control.
The @gemshell/win32-x64 npm package version 1.2.1 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, secure machine. Removal of the package does not guarantee the elimination of all malicious software introduced by it, as full control of the system may have been granted to an attacker.
Multiple critical vulnerabilities have been identified in the ANGLE component used by the chromium-browser within WebKitGTK, a web rendering engine ported to the GTK platform. These vulnerabilities include arbitrary code execution, information disclosure, use-after-free, buffer overflow, improper input validation, and uninitialized resource issues. Red Hat has released an update for webkit2gtk3 on Red Hat Enterprise Linux 8.4 to address these security flaws and fix a regression affecting Eclipse IDE WebKit-based views on CentOS Stream 8.
Multiple security vulnerabilities have been addressed in the Red Hat Enterprise Linux 7 Extended Lifecycle Support kernel-rt packages, which provide the Real Time Linux Kernel. The fixes cover issues such as out-of-bounds reads, use-after-free conditions, missing locking and protection mechanisms, validation errors, and permission checks across various kernel subsystems including netfilter, Bluetooth, procfs, device mapper cache policy, IPv6 extension headers, SELinux, and IPv4 checksum validation. These vulnerabilities could impact system stability and security, including potential local privilege escalation. Red Hat has released updates that must be applied and followed by a system reboot to mitigate these issues.
Between July and September 2026, approximately 7.3 billion email-based phishing threats were detected, with a significant 41% increase in attacks in September compared to August. Attack techniques shifted notably, including a decline in QR code phishing and a resurgence of CAPTCHA-gated attacks using SVG attachments. Domain spoofing persisted, affecting 129 million messages impersonating business services. Credential theft remained the primary goal, while business contact impersonation declined. Teams-based phishing increasingly used common personal names instead of help desk identities. Targeted campaigns affected legal organizations and Spanish-speaking users, delivering Agent Tesla malware. The disruption of the Tycoon2FA phishing platform resulted in a 99.8% reduction in its phishing volume.
Red Hat has released a critical security advisory for Red Hat Satellite 6.16 EUS addressing multiple vulnerabilities across various components including Django, urllib3, GitPython, Pillow, puppetserver, and others. The vulnerabilities include remote code execution, arbitrary file read, denial of service, information disclosure, and authorization bypass issues. The advisory provides updates that fix these security flaws. Users of Red Hat Satellite 6.16 EUS are advised to apply the security updates to mitigate these risks.
A critical security vulnerability (CVE-2026-115731) affecting the Red Hat Satellite Client's openvox-agent component allows authenticated remote code execution via report event deserialization. Red Hat has issued a security advisory with updates to fix this flaw across multiple Red Hat Enterprise Linux versions and architectures.
Red Hat Satellite 6.19 includes multiple critical security vulnerabilities affecting the openvox-agent and openvox-server components. These include integer overflows and double free issues in regular expression parsing, authenticated remote code execution via deserialization, certificate name authorization bypass, and denial of service via unbounded memory allocation. Red Hat has released security updates addressing these issues.
Two denial of service vulnerabilities have been identified in the Qt software toolkit's XML handling components, specifically in XML serialization and XML parsing. These issues affect the qt5-qtbase and qt6-qtbase packages used in Red Hat Enterprise Linux 8.6. The vulnerabilities can cause application crashes or resource exhaustion due to uncontrolled recursion or parsing flaws in XML processing.
Red Hat has released an important security update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 (RHBQ 3.33.4.SP3) addressing multiple vulnerabilities. These include denial of service issues via compression bombs, unthrottled memory allocation, buffer overflows, and out-of-bounds writes; authorization and authentication bypasses; and information disclosure due to improper proxy authentication handling. The update aims to improve security and stability by fixing these issues.
A vulnerability (CVE-2026-116591) was found in the klauspost compress library's Zstandard (zstd) decompression implementation used in Red Hat Hardened Images RPMs. The flaw is an integer handling error in the decompression logic that leads to an out-of-bounds read and an unhandled panic, causing the application to crash and resulting in a denial of service (DoS). This affects applications decompressing untrusted zstd inputs. No direct workaround exists within the library itself, but filtering untrusted inputs or restricting decompression to trusted clients can mitigate risk until patched versions are applied.
A security update for the SUSE cpupower tool addresses CVE-2026-80663, which involves hardening the daemon pidfile open operation in the intel-speed-select component. The update also includes various fixes and improvements to cpupower and turbostat utilities. No CVSS score is provided, but the severity is labeled high.
Red Hat has released a critical security update for OpenJDK 11.0.33 Extended Lifecycle Support (ELS) portable Linux builds. This update replaces version 11.0.32.1 and includes numerous security fixes addressing multiple vulnerabilities across various components such as TLS, HTTP client/server, Kerberos, image processing, and certificate handling. The update also distrusts certain intermediate CA certificates due to security concerns. The advisory references multiple CVEs fixed in this release, reflecting a broad effort to enhance security and stability.
A denial of service vulnerability exists in the Go standard library net/url package used by the OpenShift Compliance Operator. The package does not limit the number of unique query parameters parsed, allowing an attacker to send a specially crafted HTTP request with many unique query parameters. This causes excessive memory consumption and can crash or hang the application. Red Hat has released OpenShift Compliance Operator v1.10.1 to address this and other bugs.
Red Hat has released a security update for Red Hat OpenShift GitOps version 1.20.11 addressing a vulnerability identified as CVE-2026-37236. The update is classified as important with a moderate severity level. No specific details about the nature of the vulnerability or its impact are provided beyond the CWE-444 classification. There are no known exploits in the wild, and no affected versions are explicitly listed. Users are advised to apply the update after ensuring all previous relevant errata are installed.
A vulnerability in BuildKit allows a client with access to the BuildKit control API to submit crafted build requests that set extended attributes on files outside the BuildKit state directory. This can lead to privilege escalation on the underlying system, especially in multi-tenant environments such as shared OpenShift build services. The issue primarily affects Linux build hosts and can be mitigated by restricting access to the BuildKit API and isolating build execution. An official update to BuildKit v0.34.1 or corresponding Red Hat builds addresses this flaw by confining extended attribute modifications to the BuildKit state directory and preventing symlink traversal outside the build boundary.
