Red Hat Enterprise Linux 8.0_aarch64

Underflow in PHP-FPM can lead to RCE

Squid: request/response smuggling in http/1.1 and icap

Squid: denial of service in http digest authentication

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.

Buildah: buildah allows arbitrary directory mount

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

Rsync: info leak via uninitialized stack contents

Rsync: --safe-links option bypass leads to path traversal

Rsync: path traversal vulnerability in rsync

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Ghostscript: incomplete fix for cve-2020-16305

Iperf3: possible denial of service

Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h