CVE-2024-36309 is a medium-severity vulnerability affecting AMD EPYC 9004 Series processors. It involves missing lock bit protection in the Northbridge IO (NBIO), which could allow a privileged attacker to exploit an intentionally disabled device for remapping attacks. This may impact data confidentiality, integrity, or availability. No patch or remediation information is currently available.
A path traversal vulnerability (CVE-2026-79655) exists in the sos package used in Red Hat Enterprise Linux 9. This flaw occurs during tar extraction in the sos clean process due to unvalidated symlink and hardlink targets, allowing arbitrary file writes. Red Hat has released an update that fixes this issue in sos version 4.11.2-7.el9_9. The vulnerability is rated as important by Red Hat Product Security.
Multiple security vulnerabilities have been identified in libreswan, an implementation of IPsec and IKE for Linux used to build secure VPN tunnels. The issues include an IKEv2 Use-After-Free bug when using IKE-over-TCP, a pre-authentication null pointer dereference in the EAP code, and a null pointer dereference in the PKCS#7 bundle with no certificates. These vulnerabilities have been rated as important by Red Hat and affect Red Hat Enterprise Linux 9. An update is available to address these issues.
A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.
The hissakdx-wix-ssr-callback-canary npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software, as the attacker may have gained full control of the system.
The npm package 'selectlist-polyfill-lite' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by this package.
The npm package 'read-react-app-in' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removal of the package alone may not eliminate all malicious software, as the attacker may have gained full control of the system.
The npm package 'read-react-app-test' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, trusted machine. Removing the package alone may not fully eliminate the malicious software, as the attacker may have gained full control of the system.
The npm package 'read-react-app-out' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removing the package alone may not fully eradicate the malicious software, as the attacker may have established persistent control over the system.
Red Hat has issued a security advisory for OpenSSH addressing three vulnerabilities: a security bypass in SFTP due to command-line argument parsing (CVE-2026-59997), an undocumented GSSAPIStrictAcceptorCheck behavior affecting Windows Active Directory security (CVE-2026-59998), and a denial of service via excessive GSSAPI authentication attempts (CVE-2026-60000). These issues impact OpenSSH implementations on Red Hat Enterprise Linux 9 across multiple architectures. The update is rated as having moderate security impact.
Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.
The solvit-cli npm package contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory.
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys.
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.
Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to swap out a guest device without the guest's knowledge, potentially resulting in a loss of confidentiality and integrity.
An **expression language injection** has been found in the HeaderContentGuard.permit function in publication.py of the content guard in the **Pulpcore** package. The guard is supposed to check a value in a request header. It saves a jq filter and runs that filter against the header when a client asks for content. The filter is not limited to the header, and jq's env builtin also returns the environment of the content process. A low-privileged network attacker or user who can create a header content guard and attach it to a distribution can save a filter that reads that environment. The content request is allowed or denied according to the filter result. Repeating the request lets that attacker or user recover the environment, including Pulp settings held there, such as the Django secret key or the database password.
An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global firmware variables, potentially resulting in loss of integrity.
Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising SEV-SNP guest memory integrity and confidentiality.
Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to potentially launch a guest whose attestation report contains an ID key digest for an ID block that doesn't match the guest's measurement resulting in loss of integrity.