Cert-manager: potential dos when parsing specially crafted pem inputs

Chromium: CVE-2024-12382 Use after free in Translate

Chromium: CVE-2024-12381 Type Confusion in V8

Unbounded memory buffering in SelectorSocketTransport.writelines()

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Rsync: --safe-links option bypass leads to path traversal

Rsync: path traversal vulnerability in rsync

Rsync: rsync server leaks arbitrary client files

Rsync: info leak via uninitialized stack contents

Rsync: heap buffer overflow in rsync due to improper checksum length handling

Chromium: CVE-2024-12053 Type Confusion in V8

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Rustls: rustls network-reachable panic in `acceptor::accept`

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.

Kernel: stack overflow problem in open vswitch kernel module leading to dos

Denial of Service through Data corruption in gRPC-C++

Chromium: CVE-2024-11395 Type Confusion in V8

Integer overflow in the firebird and dblib quoters causing OOB writes