Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data

Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

A flaw was discovered in the mholt/archiver package

An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4

There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROUPS=y ,…

A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a…

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer…

A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to…

A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass…

The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion

psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion

psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device…

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the…

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Glib: integer overflow in in g_escape_uri_string()

A flaw was found in Podman

An unconstrained memory consumption vulnerability was discovered in Keycloak

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7

Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Libxml2: libxml2: denial of service via crafted xsd-validated document

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

A flaw was found in OpenShift's Telemeter

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions

A flaw was found in undertow

A flaw was found in undertow

A compliance problem was found in the Red Hat OpenShift Container Platform

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API

A flaw was found in crun where containers were incorrectly started with non-empty default permissions

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as…

A flaw was found in multiple versions of OpenvSwitch

A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send…

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling