2026-10-15 — curl HTTP/2 上傳 UAF 被證明可轉成 RCE
primary=https://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/ primary=https://curl.se/docs/CVE-2026-92392.html primary=https://daniel.haxx.se/blog/2026/10/14/curl-8-23-0/
Practical guides from real debugging sessions. No fluff — just the commands, configs, and architecture decisions that actually ship.
primary=https://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/ primary=https://curl.se/docs/CVE-2026-92392.html primary=https://daniel.haxx.se/blog/2026/10/14/curl-8-23-0/
primary=https://www.openwall.com/lists/oss-security/2026/10/14/2 primary=https://git.kernel.org/linus/de845981da67a6b049080c87e605130b0c30adc5
primary=https://www.openwall.com/lists/oss-security/2026/10/14/11 primary=https://kb.cert.org/vuls/id/573195 primary=https://github.com/pyca/cryptography/security/advisories/GHSA-m959-cc7f-wv43
primary=https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/ primary=https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
primary=https://blog.cloudflare.com/hyperdrive-mysql/ primary=https://dev.mysql.com/doc/dev/mysql-server/9.7.2/page_protocol_com_reset_connection.html
primary=https://github.com/react/react/releases/tag/v19.3.1 primary=https://github.com/facebook/react/pull/37845
primary=https://www.docker.com/blog/harbor-docker-sandboxes-run-safe-reproducible-agent-evals/ primary=https://www.docker.com/blog/why-microvms-the-architecture-behind-docker-sandboxes/ primary=https://docs.harborframework.com/
primary=https://github.com/timescale/pg_vectorsearch primary=https://www.tigerdata.com/blog/announcing-pg_vectorsearch-scalable-open-source-vector-search-postgresql primary=https://github.com/timescale/pg_vectorsearch/blob/main/docs/maintenance.md
primary=https://go.dev/blog/http-connection-reuse primary=https://go.dev/doc/go1.27
primary=https://arxiv.org/abs/2610.13990 primary=https://github.com/llm-sys/flash-indexer
primary=https://github.com/rust-lang/rust/issues/164250 primary=https://github.com/rust-lang/rust/pull/164277 primary=https://github.com/rust-lang/rust/issues/128225
primary=https://www.openwall.com/lists/oss-security/2026/10/13/11 primary=https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56
primary=https://github.com/advisories/GHSA-rv87-ccxw-8ggf primary=https://github.com/dotnet/aspnetcore/security/advisories/GHSA-rv87-ccxw-8ggf primary=https://github.com/dotnet/announcements/issues/472
primary=https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure primary=https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/
primary=https://www.anthropic.com/engineering/redesigning-source-control
primary=https://github.com/whatwg/html/commit/94857062b437b45c4dc891b130be83b40f7ae999 primary=https://github.com/whatwg/html/issues/12560 primary=https://github.com/whatwg/html/issues/12543
primary=https://blogs.gentoo.org/mgorny/2026/10/12/a-plea-not-to-use-uv-build/ primary=https://github.com/bytecodealliance/rustix/issues/1700 primary=https://pypi.org/project/uv-build/ primary=https://peps.python.org/pep-0517/
primary=https://clickhouse.com/blog/chasing-32ms-tail-latency-clickhouse primary=https://github.com/ClickHouse/ClickHouse/pull/111034
primary=https://daniel.haxx.se/blog/2026/10/13/a-slightly-faster-slimmer-curl/ primary=https://daniel.haxx.se/blog/2026/08/14/curl-performance-2/
primary=https://deepmind.google/models/gemini/ primary=https://storage.googleapis.com/deepmind-media/gemini/gemini_4_argon_model_evaluation.pdf
primary=https://larstofus.com/2026/10/11/speeding-up-the-unreal-editor-by-not-using-unnecessarily-secure-hash-methods/ primary=https://github.com/EpicGames/UnrealEngine/pull/15237
primary=https://rustsec.org/advisories/RUSTSEC-2026-0338.html primary=https://rustsec.org/advisories/RUSTSEC-2026-0340.html primary=https://rustsec.org/packages/quinn-proto.html
primary=https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/ primary=https://ghostpat.com
primary=https://engineering.fb.com/2026/10/12/video-engineering/shipping-media-over-quic-at-meta-scale-for-instagram-live-ingest/ primary=https://datatracker.ietf.org/doc/draft-ietf-moq-transport/ primary=https://github.com/facebookexperimental/moxygen primary=https://datatracker.ietf.org/doc/draft-kpugin-rush/
primary=https://github.com/whatwg/html/commit/e88f8aa8eb303d5048b05cc3125fdde58a584ac7