Red Hat

A vulnerability was found in WebKit.

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values.

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4…

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed.

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.

jq is a command-line JSON processor.

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel.

A flaw was found in Yelp.

A flaw was found in libsoup.

A flaw was found in python.

A flaw was found in GLib.

There's a flaw in urllib's AbstractBasicAuthHandler class.

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel.

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.

A flaw was found in the way Samba maps domain users to local users.

A flaw was found in the libtiff library.

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface.

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write().

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration.

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel.

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.