Memory safety bug fixed in Thunderbird 152

Rsync < 3.4.3 Integer Overflow Information Disclosure

Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b

Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147

Mitigation bypass in the DOM: Security component

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass

Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file

Emacs: emacs: arbitrary code execution in flymake mode

Gimp: integer overflow when generating a thumbnail preview for a psd file

Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions

Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

Emacs: emacs: command injection via crafted filenames in tramp

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)

Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images

Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

USB: serial: kl5kusb105: fix bulk-out buffer overflow

drm/gem: Try to fix change_handle ioctl, attempt 4

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ice: fix double-free of tx_buf skb

Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

xfrm: hold dev ref until after transport_finish NF_HOOK

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Xorg-x11-server: use-after-free in procrenderaddglyphs

Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

Xorg-x11-server: heap buffer overflow in disabledevice