Session fixation vulnerability in pcsd in pcs before 0.9.157

A vulnerability was found in PostgreSQL

A flaw was found in the Linux kernel's NFS41+ subsystem

Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file

Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation

Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)

Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images

Gimp: gimp: integer overflow in read_rle_channel()

Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

mm/list_lru: drain before clearing xarray entry on reparent

drm/gem: Try to fix change_handle ioctl, attempt 4

ice: fix double-free of tx_buf skb

netfilter: nat: use kfree_rcu to release ops

Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory

Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader

Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

A flaw was found in xfig

Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data

Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

A use-after-free flaw was found in X.Org and Xwayland

A use-after-free flaw was found in X.Org and Xwayland

An access to an uninitialized pointer flaw was found in X.Org and Xwayland

An out-of-bounds write flaw was found in X.Org and Xwayland

A buffer overflow flaw was found in X.Org and Xwayland

A heap overflow flaw was found in X.Org and Xwayland

A buffer overflow flaw was found in X.Org and Xwayland

A use-after-free flaw was found in X.Org and Xwayland

In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds accesses replaced…

An out-of-bounds memory access flaw was found in the X.Org server

A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality

A flaw was found in the X.Org server

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the…

A use-after-free flaw was found in the Linux Kernel

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations

A vulnerability was found in perl 5.30.0 through 5.38.0

A vulnerability was found in insights-client