Red Hat Enterprise Linux 9.0

389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing

Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing

Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

Opensc: multiple memory issues with pkcs15-init (enrollment tool)

The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Sssd: use-after-free crash in sssd' 'sssd_pam' process

Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files

Platform: token exposed at importing project

Libssh: improper sanitation of paths received from scp servers

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack

Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing

Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling

Shim: out-of-bounds read printing error messages

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Potential buffer overflow in php_cli_server_startup_workers

Reachable assertion in dbus_set_host_name

Reachable assertion in avahi_dns_packet_append_record

Reachable assertion in avahi_escape_label

Reachable assertion in avahi_rdata_parse

Reachable assertion in avahi_alternative_host_name

Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

Libvirt: crash of virtinterfaced via virconnectlistinterfaces()

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.

Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()

Aap-gateway: xss on aap-gateway

Gimp: gimp: denial of service via specially crafted seattle filmworks file

Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check

Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count

Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.