tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

rr

概述 rr 是一款用于录制、回放和调试应用程序执行过程（进程和线程树）的轻量级工具。调试功能扩展了 gdb，提供了非常高效的反向执行，与标准 gdb/x86 功能（如硬件数据监视点）结合使用，使调试变得更加有趣。关于该项目的更多信息，包括如何安装、运行和构建 rr 的说明，请访问 https://rr-project.org。目前最好的技术概览是论文 《面向可部署性的录制与重放工程：扩展技术报告》。 或者直接查看安装和构建说明。 欢迎贡献！ 在提交拉取请求之前，请务必查看拉取请求清单。 如果你觉得 rr 有用，请添加推荐语。 rr 的开发由 Pernosco 赞助，最初由 Mozilla...

CLEANSTART-2026-NM19366 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-QS35295 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Security vulnerability affects the temporal-server package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CLEANSTART-2026-SE64937 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-PN99410 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Security vulnerability affects the cri-tools package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CLEANSTART-2026-SU70558 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Security vulnerability affects the kube-state-metrics-fips package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CLEANSTART-2026-YN61709 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-JY84269 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

PT-2026-102763

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap-buffer-overflow occurs when a host on the local area network sends two mDNS records with owner names whose lengths fall into the same rounded slot size...

CLEANSTART-2026-UV13195 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-UW01698 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-RJ45825 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Security vulnerability affects the fluent-operator package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

PT-2026-105250

Security vulnerability affects the fluent-operator package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124494 advisory. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. Tenable has extracted the preceding description block...

curl: Missing applicability validation allows non-applicable HTTPS RR to reach ECH processing

Summary The HTTPS RR applicability check Curlhttpsrrapplicable is applied before ALPN selection, but the same check is not applied consistently in the ECH initialization paths. When an HTTPS RR is not applicable to the active connection, curl correctly reports it as not applicable and avoids usin...

CLEANSTART-2026-SC24710 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Security vulnerability affects the argo-cd package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

PT-2026-105251

Security vulnerability affects the argo-cd package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bonding: Fixed a NULL dereference of the struct bonding.rrtxcounter member. This issue occurs because if a bond is created with an initial mode != zero Round Robin, the memory required for the counter is never allocated. When...

CLEANSTART-2026-LE73008 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the prometheus-redis-exporter package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...