A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to…

A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass…

The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free

psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion

psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion

psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device…

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the…

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Glib: integer overflow in in g_escape_uri_string()

A flaw was found in Podman

An unconstrained memory consumption vulnerability was discovered in Keycloak

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7

Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Libxml2: libxml2: denial of service via crafted xsd-validated document

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

A flaw was found in OpenShift's Telemeter

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions

A flaw was found in undertow

A flaw was found in undertow

A compliance problem was found in the Red Hat OpenShift Container Platform

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API

A flaw was found in crun where containers were incorrectly started with non-empty default permissions

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as…

A flaw was found in multiple versions of OpenvSwitch

A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send…

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling

runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount…

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)

An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6

The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS…

An issue was discovered in dns.c in HAProxy through 1.8.14

An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2