Post Syndicated from daroc original https://lwn.net/Articles/1102044/

The Node.js project has
released
a number of security updates to fix, among other vulnerabilities, a
remote-code-execution bug affecting programs that use Brotli compression. And,
in case any programmers who use compiled languages thought they could relax, the
musl libc project has also announced a
new vulnerability: an
out-of-bounds
write that could potentially lead to remote code execution, although that
has not been demonstrated.