directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar

Linux Kernel could allow a local attacker to execute arbitrary code on the system caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information causing a denial of service.

Chromium: CVE-2022-1640 Use after free in Sharing

Chromium: CVE-2022-1639 Use after free in ANGLE

Chromium: CVE-2022-1638 Heap buffer overflow in V8 Internationalization

Chromium: CVE-2022-1637 Inappropriate implementation in Web Contents

Chromium: CVE-2022-1636 Use after free in Performance APIs

Chromium: CVE-2022-1635 Use after free in Permission Prompts

Chromium: CVE-2022-1634 Use after free in Browser UI

Buffer Over-read in function find_next_quote in vim/vim

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit b4e79bfa.

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit b4e79bfa.

Heap buffer overflow in vim_strncpy find_word in vim/vim

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim

Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim

Use after free in append_command in vim/vim

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.