An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18

A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58

A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c

A vulnerability was found in ImageMagick

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault

A heap buffer overflow issue was found in ImageMagick

In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list

An issue was discovered in uriparser before 0.9.6

An issue was discovered in uriparser before 0.9.6

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations

Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection

H5P metadata automatically populated the author with the user's username, which could be sensitive information

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions

Students in "Only see own membership" groups could see other students in the group, which should be hidden

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they…

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups

A flaw was found in the check_chunk_name() function of pngcheck-2.4.0

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring