Debian Debian Linux 11.0

jfs: Prevent copying of nlink with value 0 from disk inode

PCI: endpoint: Fix configfs group list head handling

nbd: fix uaf in nbd_genl_connect() error path

arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB

clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

s390/pkey: Prevent overflow in size calculation for memdup_user()

i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path

bus: mhi: host: Fix race between unprepare and queue_buf

scsi: megaraid_sas: Fix invalid node index

dmaengine: idxd: Fix double free in idxd_setup_wqs()

ASoC: codecs: wcd9335: Fix missing free of regulator supplies

xfrm: interface: fix use-after-free after changing collect_md xfrm interface

NFS: Fix a race when updating an existing write

btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()

net_sched: prio: fix a race in prio_tune()

iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush

ALSA: pcm: Fix race of buffer access at PCM OSS layer

mm/damon/sysfs: fix use-after-free in state_show()

kernfs: Fix UAF in polling when open file is released

VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify

net_sched: red: fix a race in __red_change()

mm/debug_vm_pgtable: clear page table entries at destroy_args()

net_sched: ets: fix a race in ets_qdisc_change()

mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

net/sched: sch_qfq: Fix race condition on qfq_aggregate

smb: client: fix race with concurrent opens in rename(2)

Deserialization of Untrusted Data

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle

flatpak-builder can access files outside the build directory.

Change in port should be considered a change in origin in Guzzle

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

Authenticated cross-site scripting (XSS) in WordPress editor

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets