[SECURITY] Fedora 45 Update: llvm22-22.1.8-2.fc45

LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...

[SECURITY] Fedora 45 Update: llvm20-20.1.8-13.fc45

LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...

llvm:llvm-dis-fuzzer: Heap-buffer-overflow in XXH3_hashLong_64b

Detailed Report: https://oss-fuzz.com/testcase?key=4688655238365184 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dis-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7abbce2e4eaa Crash State: XXH3hashLong64b...

Fedora 45 : mingw-llvm (2026-e03c0baa59)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e03c0baa59 advisory. Update to llvm-23.1.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Joern 4.0.641

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.640

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.639

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.633

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.631

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

fil-c v0.685

Fil-C 0.686 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM’s integrated assembler would incorrectly byte-swap NOPs when compiling for big-endian, and the resulting sequence of bytes happened to...

llvm:llvm-special-case-list-fuzzer: Crash in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=6388532688781312 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b6587ce1ff0 Crash State: pere pere pere Sanitizer: addre...

Joern 4.0.624

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

llvm:clang-objc-fuzzer: Heap-buffer-overflow in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=4546641330569216 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x527000011207 Crash State:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100768 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, currentthreadinfo...

Security Bulletin:Vulnerability in llvm-filesystem affects IBM Netezza Appliance

Summary The llvm-filesystem package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-13573 Vulnerability Details CVEID:CVE-2026-13573 DESCRIPTION: A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function...

Security Bulletin:Vulnerability in llvm-filesystem affects IBM Netezza Appliance

Summary The llvm-filesystem package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-13574 Vulnerability Details CVEID:CVE-2026-13574 DESCRIPTION: A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function...

Joern 4.0.598

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

llvm:llvm-isel-fuzzer--arm-O2: Use-of-uninitialized-value in createSlotTracker

Detailed Report: https://oss-fuzz.com/testcase?key=6013369242157056 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--arm-O2 Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: createSlotTracker...

Joern 4.0.593

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...