boundary

Boundary Boundary란 무엇인가: https://developer.hashicorp.com/boundary/docs/what-is-boundary 웹사이트: https://www.developer.hashicorp.com/boundary/ 포럼: HashiCorp Discuss 문서: https://developer.hashicorp.com/boundary/docs 튜토리얼: HashiCorp's Learn Platform Boundary는 네트워크의 호스트와 중요 시스템에 액세스할 수 있는 간단하고 안전한 방법을...

jit

jitpass - 적시just-in-time 비밀번호 개발 머신을 위한 적시just-in-time 자격 증명. 문서 · 빠른 시작 · 지원 도구 · 명령어 참조 · 보안 상태: macOS 전용Apple Silicon, 아직 개발 중입니다. jit이 무엇인가 30초 요약 당신의 비밀은 머신 전체에 평문으로 흩어져 있습니다: .env 파일, /.aws/credentials, /.zshrc exports, .npmrc 토큰, MCP 설정. 당신으로 실행되는 모든 것은 그것들을 읽을 수 있습니다. 악성 curl | sh, 수상한 np...

Astra Linux – Vulnerability in Firefox

In some cases, JIT-compiled code might have dereferenced a wild pointer value. This could lead to a exploitable crash. This vulnerability affects Firefox versions earlier than 122...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid bpfprogret0warn when JIT fails Syzkaller reported an issue: WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 bpfprogret0warn+0xa/0x20 kernel/bpf/core.c:2357 Linked modules: CPU: 3 UID: 0 PID: 217 Comm: kworker/u32:6...

Astra Linux – Vulnerability in Firefox and Thunderbird

JIT compilation errors, use-after-free in the JavaScript Engine: JIT components. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fixed potential NULL dereferencing. The bpfjitbinaryfree function requires a non-NULL argument. When the RISC-V BPF JIT fails to converge within NRJITITERATIONS steps, jitdata-header will be NULL, triggering a NULL...

Astra Linux – Vulnerability in pcre2

A out-of-bounds read was discovered in PCRE before version 10.34, where the pattern \X was JIT-compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, as it could allow an attacker to cause the...

Astra Linux – Vulnerability in Firefox and Thunderbird

Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

Astra Linux – Vulnerability in Firefox

In certain cases, JIT incorrectly optimized MSubstr operations, resulting in out-of-bounds reads. This vulnerability affects Firefox versions less than 125...

Astra Linux – Vulnerability in Firefox and Thunderbird

Sometimes, when invalidating JIT code while using an iterator, the newly generated code might be incorrectly overwritten. This could lead to a potentially exploitable crash. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

CVE-2026-68295 LoongArch: BPF: Zero-extend signed ALU32 div/mod results

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...

CVE-2026-68295

In the Linux kernel, LoongArch BPF ALU32 division/modulo results were sign-extended in the JIT, causing upper 32 bits to be set while verifier/interpreter assume zero-extension. The issue arises when signed ALU32 BPF_DIV/BPF_MOD (off=1) produce a negative quotient/remainder, leaving bits 63:32 se...

CVE-2026-68285

The CVE concerns LoongArch BPF in the Linux kernel. Root cause: during JIT compilation, bpf_int_jit_compile() may return early on the first pass, leaving ctx->offset alive; if a later subprogram fails, bpf_jit_free() does not free jit_data->ctx.offset, causing a memory leak of the JIT conte...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in the DOM: Navigation...

SUSE CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

UBUNTU-CVE-2026-64507

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...

UBUNTU-CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...