Red Hat Enterprise Linux 8.8_s390x

Underflow in PHP-FPM can lead to RCE

Postgresql: buffer overrun from integer overflow in array modification

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.

Buildah: buildah allows arbitrary directory mount

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

Rsync: info leak via uninitialized stack contents

dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

Yelp: arbitrary file read

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

Glibc: potential use-after-free in getaddrinfo()

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Postgresql: role pg_signal_backend can signal certain superuser processes.

Postgresql: memory disclosure in aggregate function calls