نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
AWS Security Bulletins

CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction utility in GluonTS before 0.17.0. An actor who supplies a crafted tar archive containing symbolic or hard links might be able to write arbitrary files outside the intended extraction directory…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها رایانش ابری متن‌باز
خواندن متن کامل در AWS Security Bulletins درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Orca Security

*sshole: OpenSSH Authentication Bypass Gives Attackers Root on Alpine Linux

A critical authentication bypass, with no CVE assigned yet, was disclosed in OpenSSH on musl-based Linux distributions such as Alpine. An unauthenticated attacker can log in over SSH password authentication as an account that should not accept passwords at all, including root. On a default Alpine install that means root access from a single connection, […]

آسیب‌پذیری و روز صفر سیستم‌عامل امنیت هویت و دسترسی
منبع
CSO Online

OpenAI built an AI pipeline to find, exploit and patch Linux flaws

OpenAI has developed an autonomous AI pipeline that can identify software vulnerabilities, develop working exploits to validate their impact and generate patches for human review. In an October experiment targeting the Linux kernel, the pipeline created exploits for 948 distinct local privilege-escalation (LPE) vulnerabilities at a total API cost of $1.2 million, the company said in a November 4 research report, “A t…

آسیب‌پذیری و روز صفر امنیت ابری امنیت هوش مصنوعی
منبع