4729 matches found
Astra Linux – Vulnerability in Golang 1.19, Golang 1.23
The compiler is designed to unwrap pointers, which are the operands of a memory move. A no-op interface conversion prevented the compiler from making the correct determination regarding non-overlapping moves, potentially leading to memory corruption at runtime...
Astra Linux – Vulnerability in Ruby 2.5
A issue was discovered in Ruby 3.x through 3.3.0. If data supplied by an attacker is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3....
CISB-Bench: An Auditable Source--IR Dataset of Compiler-Introduced Security Bugs
Compiler-introduced security bugs CISBs arise when an optimization, lowering, or instrumentation decision changes a security-relevant property of the generated program. They are difficult to study because their evidence is distributed across issue reports, reduced tests, historical configurations...
Security Bulletin: Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1
Summary Vulnerabilities reported in compiler-21.2.4.tgz are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-54265 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17,...
[SECURITY] Fedora 45 Update: llvm-23.1.2-2.fc45
LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...
[SECURITY] Fedora 45 Update: llvm22-22.1.8-2.fc45
LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...
[SECURITY] Fedora 45 Update: llvm21-21.1.8-10.fc45
LLVM is a compiler infrastructure designed for compile-time, link-time, runtime, and idle-time optimization of programs from arbitrary programming languages. The compiler infrastructure includes mirror sets of programming tools as well as libraries with equivalent functionality...
[SECURITY] Fedora 45 Update: gnucobol-3.2-12.fc45
COBOL compiler, which translates COBOL programs to C code and compiles them using GCC...
[SECURITY] Fedora 45 Update: gcc-16.2.1-2.fc45.1
The gcc package contains the GNU Compiler Collection version 16. You'll need this package in order to compile C code...
NPM: Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name
NPM: Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler POST /api/v1/query via unsanitized window-function name vulnerability discovered by ? in WordPress Npm trigger.dev versions = 4.5.5...
Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name
Summary A cross-tenant SQL injection in the TSQL query compiler lets any authenticated trigger.dev customer read every other tenant's analytics data. The customer-facing query endpoint POST /api/v1/query accepts a TSQL/TRQL query that is compiled to ClickHouse SQL by internal-packages/tsql. The...
GHSA-9Q4R-4842-93VW Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name
Summary A cross-tenant SQL injection in the TSQL query compiler lets any authenticated trigger.dev customer read every other tenant's analytics data. The customer-facing query endpoint POST /api/v1/query accepts a TSQL/TRQL query that is compiled to ClickHouse SQL by internal-packages/tsql. The...
pcre2: pcre2: Out-of-bounds write via crafted regular expression
A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...
CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...
CLEANSTART-2024-GP69623 fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp
Security vulnerability affects the heimdal package. The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp...
Rocky Linux 9.6 [CIQ] Security Update: protobuf / protobuf-compiler / protobuf-compiler-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1447)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261447 advisory. This advisory aggregates security fixes for the protobuf SRPM in CIQ LTS 9.6. It addresses 3 CVEs: CVE-2022-1941, CVE-2026-0994, CVE-2021-22570. Tenable...
AlmaLinux 9.2 [TuxCare] Security Update: protobuf / protobuf-compiler / protobuf-devel / protobuf-emacs / etc (ALMALINUX9.2:CLSA-2025:1757017511)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757017511 advisory. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupt...
Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_1825)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241825 advisory. OpenJDK: long Exception message leading to crash 8319851 CVE-2024-21011 OpenJDK: integer overflow in C1 compiler address generation 8322122 CVE-2024-21068...
AlmaLinux 9.6 [TuxCare] Security Update: protobuf / protobuf-compiler / protobuf-devel / protobuf-emacs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772451263)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772451263 advisory. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags ca...
AlmaLinux 9.2 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1766074947)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1766074947 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE component: Compiler. The supported version...