Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries

Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization

Icu: stack buffer overflow in the srbroot::addtag function

Kernel: aoe: improper reference count leads to use-after-free vulnerability

Kernel: use after free bug in btsdio_remove due to race condition