Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS

FreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion

FreeRDP RDPGFX CacheToSurface heap-buffer-overflow via clamped-rectangle validation bypass

wifi: mac80211: remove station if connection prep fails

FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL server undersizes allocations, via integer wraparound

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Privilege escalation in the Graphics: WebRender component

Incorrect boundary conditions, integer overflow in the Graphics: Text component

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

The issue was addressed with improved memory handling

Use-after-free in the Storage: IndexedDB component

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Heap buffer overflow in libvpx

PostgreSQL missing validation of multibyte character length executes arbitrary code

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Use-after-free in the IPC component

Sandbox escape due to integer overflow in the Graphics component

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

Abrt: command-injection in abrt leading to local privilege escalation

The issue was addressed with improved memory handling

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

Libtiff: libtiff write-what-where

Libssh: incorrect return code handling in ssh_kdf() in libssh

Postgresql: extension script @substitutions@ within quoting allow sql injection

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

Sandbox escape due to incorrect boundary conditions in the Telemetry component

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

Libxml2: double-free/uaf in libxml2 python bindings

Udisks: out-of-bounds read in udisks daemon

Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

net: pull headers in qdisc_pkt_len_segs_init()

No description published yet