Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Icu: stack buffer overflow in the srbroot::addtag function