Node.js and musl libc patch serious vulnerabilities

Node.js released security updates fixing a remote-code-execution bug affecting programs that use Brotli compression. The musl libc project also disclosed an out-of-bounds write that could potentially lead to remote code execution, though exploitation has not been demonstrated.

• Node.js fixed an RCE bug in Brotli-compression code
• musl libc patched an out-of-bounds write flaw
• RCE via musl libc has not been demonstrated