Red Hat Enterprise Linux 10.0

Rsync: heap buffer overflow in rsync due to improper checksum length handling

Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication

Samba: samba: remote code execution in printing subsystem via unescaped job description

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Gnutls: gnutls: authentication bypass via nul character in username

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

netfilter: conntrack: remove sprintf usage

ipv6: fix possible UAF in icmpv6_rcv()

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

NGINX ngx_http_rewrite_module vulnerability

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

Gnutls: gnutls: denial of service via dtls zero-length fragment

MariaDB: mysql_real_escape_string() incorrectly handled big5

Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

Libssh: libssh: authentication bypass via missing gssapi principal check

Libssh: incorrect return code handling in ssh_kdf() in libssh

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Gnutls: vulnerability in gnutls othername san export

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.

Corosync: corosync: denial of service and information disclosure via crafted udp packet

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Gnutls: vulnerability in gnutls certtool template parsing

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

Libssh: out-of-bounds read in sftp_handle()

Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags

crypto: algif_aead - Revert to operating out-of-place

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing