Codehaus-plexus: directory traversal

Glibc: dos due to memory leak in getaddrinfo.c

Gvariant offset table entry size is not checked in is_normal()

Samba: infinite loop in mdssvc rpc service for spotlight

Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

Out of bounds read in IMAP parsing

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX)

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Yelp: arbitrary file read

Ruby: openssl: ruby marvin attack

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

Gimp: gimp: double-free in read_layer_block()

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Use-after-free in the DOM: Bindings (WebIDL) component

Use-after-free in the DOM: Networking component

libssh2 userauth.c userauth_password integer overflow

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning

Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling

selinux: fix overlayfs mmap() and mprotect() access checks

Emacs: emacs: memory corruption vulnerability when processing svg css

Gimp: gimp: application crashes or information disclosure via crafted icns image files

OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)

Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Kernel: oob access in smb2_dump_detail

Kernel: out-of-bounds read vulnerability in smbcalcsize

Heap out of bound read in builtin.c

Out of bounds read in parse_module function in bfd/vms-alpha.c

Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race