• More vulnerabilities in widely deployed software

    From LWN.net@618:250/24 to All on Thu Oct 22 06:40:09 2026


    The Node.js project has
    released
    a number of security updates to fix, among other vulnerabilities, a remote-code-execution bug affecting programs that use Brotli compression. And, in case any programmers who use compiled languages thought they could relax, the
    musl libc project has also announced a
    new vulnerability: an
    out-of-bounds
    write that could potentially lead to remote code execution, although that
    has not been demonstrated.

    https://lwn.net/Articles/1102044/
    --- SBBSecho 3.37-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (618:250/24)