Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution

A privilege escalation flaw was found in Podman

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write()

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap

An issue was discovered in net/http in Go 1.11.5

A flaw was found in the Linux kernel

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory…

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area