ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

ImageMagick Arbitrary File Deletion Vulnerability

Oracle Java SE Integrity Check Vulnerability

Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

Ipa: invalid csrf protection

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration

A use-after-free flaw was found in libvirt

There's a flaw in urllib's AbstractBasicAuthHandler class

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

Glibc: potential use-after-free in getaddrinfo()

Glibc: potential use-after-free in gaih_inet()

A flaw was found in the way samba implemented SMB1 authentication

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

A flaw was found in the Linux kernel

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory…

An issue was discovered in sd-bus in systemd 239

Libssh: libssh: information disclosure via short gssapi curve25519 public key

net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service…

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area

Buildah: buildah allows arbitrary directory mount

Postgresql: role pg_signal_backend can signal certain superuser processes.

In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted,…

Postgresql: memory disclosure in aggregate function calls