patch update

AWS‑LC, Amazon’s open‑source cryptographic library, received an emergency set of patches in early March 2026 after researchers disclosed a pair of PKCS#7/CMS verification flaws and an AES‑CCM timing issue. One of those defects, tracked as CVE‑2026‑3338, is a signature validation bypass in the...

The discovery of CVE-2022-47673 exposes a subtle but consequential memory-safety problem inside GNU Binutils’ addr2line utility: the function parse_module performs unchecked reads that can step outside buffer bounds in versions before 2.39.3, creating an out‑of‑bounds read that can crash...

Siemens has released an urgent security update for Solid Edge after researchers discovered an out‑of‑bounds read in the PS/IGES Parasolid Translator that can be triggered by specially crafted IGS files — a flaw Siemens tracks as CVE‑2025‑40936 — and the vendor is urging all customers to update...