ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

ImageMagick Arbitrary File Deletion Vulnerability

Oracle Java SE Integrity Check Vulnerability

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

Ipa: invalid csrf protection

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

Keylime: challenge-response protocol bypass during agent registration

A use-after-free flaw was found in libvirt

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU

There's a flaw in urllib's AbstractBasicAuthHandler class

A flaw was found in postgresql

An off-by-one error was found in the SCSI device emulation in QEMU

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

Glibc: potential use-after-free in getaddrinfo()

Glibc: potential use-after-free in gaih_inet()

A flaw was found in the way samba implemented SMB1 authentication

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…

Xorg-x11-server: selinux unlabeled glx pbuffer

Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

Shadow-utils: possible password leak during passwd(1) change

Ghostscript: incomplete fix for cve-2020-16305

A flaw was found in the Linux kernel

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error…

An information disclosure flaw was found in Buildah, when building containers using chroot isolation

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0

An issue was discovered in sd-bus in systemd 239

Libssh: libssh: information disclosure via short gssapi curve25519 public key

net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

Iperf3: possible denial of service

Jwcrypto: denail of service via specifically crafted jwe

Squid: request/response smuggling in http/1.1 and icap

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute

Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area

Buildah: buildah allows arbitrary directory mount

Postgresql: role pg_signal_backend can signal certain superuser processes.

In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted,…

Postgresql: memory disclosure in aggregate function calls