Posted by Carlos O'Donell on Nov 04 The following security advisories have been published: GLIBC-SA-2026-0026: BIG-HKSCS decoding hang on crafted input Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang. When decoding input in the BIG5-HKSCS character set, four...
The GNU C Library security advisories update for 2026-11-04
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/517
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’
“Most of the risk is actually created by a couple of players building behind closed doors,” Clément Delangue said of the need for open source AI.
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Open source models are becoming more mainstream as enterprises, governments and startups alike rely on the promise of lower costs, more control, and more flexibility…
GodotSteam 4.17 through 4.23.2: any multiplayer peer can claim the server's peer ID
Posted by Tomasz Kaye on Nov 04 GodotSteam lets any player in a session claim to be the server. Godot names players by a peer ID, and ID 1 means the server. Steam…
Apache OFBiz: CVE Announcements
Posted by Jacopo Cappellato on Nov 04 Multiple security vulnerabilities have been identified in Apache OFBiz, including some critical issues. Affected versions: All…
libtar: incomplete fix for CVE-2021-33643/CVE-2021-33644 (heap out-of-bounds read)
Posted by nick on Nov 04 Hello, libtar's fix for CVE-2021-33643 and CVE-2021-33644 is incomplete. A crafted tar archive can still cause a heap out-of-bounds read…
[SECURITY] Apache Juneau 9.2.1 fixes multiple vulnerabilities (CVE-2026-73095, CVE-2026-121489, CVE-2026-96677, CVE-2026-73099, CVE-2026-73100, CVE-2026-73101, CVE-2026-73098, CVE-2026-73116, CVE-2026-73117)
Posted by James Bognar on Nov 04 Apache Juneau 9.2.1, released on 2026-11-03, fixes the following vulnerabilities. All affect Apache Juneau through 9.2.0. Users are…