Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

Heap Use-After-Free in the PKCS7_verify() Function

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL server undersizes allocations, via integer wraparound

PostgreSQL missing validation of multibyte character length executes arbitrary code

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Libxml2: double-free/uaf in libxml2 python bindings

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

Vim modeline bypass via various options affects Vim < 9.2.0276

NGINX ngx_http_dav_module vulnerability

Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

NGINX ngx_http_rewrite_module vulnerability

NGINX ngx_http_rewrite_module vulnerability

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O…

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…

NGINX ngx_http_mp4_module vulnerability

NGINX ngx_http_mp4_module vulnerability

Glib: integer overflow in in g_escape_uri_string()

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

P11-kit: null dereference via c_derivekey with specific null parameters

NGINX ngx_mail_auth_http_module vulnerability

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison