Red Hat Enterprise Linux

Operator: plaintext password in operator log

Openjpeg: denail of service via crafted image file

Libgepub: integer overflow in libgepub's epub archive handling

Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images

Kernel: cxgb4: use-after-free in ch_flower_stats_cb()

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.

Gimp: gimp: denial of service due to stack buffer overflow in tim image loader

Libssh: libssh: denial of service via inefficient regular expression processing

A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.

CVE

Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk

A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

Abrt: unsanitized systemd journal content written to dump directory files enables content injection

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

CVE

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Operator: passwords defined in secrets shown in statefulset yaml

Community.general: community.general keyring_info — os keyring passphrase returned in plaintext

Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Polkit: polkit: denial of service via unbounded input processing through standard input

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality.

Sssd: out-of-bounds read in the sssd

Nano: nano: format string vulnerability leads to denial of service

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

Mod_cluster/mod_proxy_cluster: stored cross site scripting

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

Keycloak: reflected xss via wildcard in oidc redirect_uri

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Moodle: stored xss in quiz grading report via user id number

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk.