NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#gettext

2 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedcode-execution1 directory-traversal1 environment-variable1 glibc1 godot1 linux1 translation-files1

2 stories, newest first · one card per story

oss-security11h ago

glibc gettext allows directory traversal via LANGUAGE

The issue affects GNU C Library 2.0 and later, except setuid or setgid programs marked AT_SECURE.

oss-security4d agohigh

Godot 4.1.0–4.7.2: code execution via .po Plural-Forms header

The .po loader stores an unvalidated Plural-Forms header; it was runtime-confirmed on official 4.7-stable and not found in 3.5.

godot code-execution

1