A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

LibreOffice and OpenOffice automatically open embedded content

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions

A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via malformed commands.

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_BLIT commands.

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGL_CCMD_RESO

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGL_CCMD_RESOURCE_INLINE_WRITE commands.

jersey: XXE via parameter entities not disabled by the jersey SAX parser

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended

cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation

gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function

eDeploy has tmp file race condition flaws

eDeploy has RCE via cPickle deserialization of untrusted data

thttpd has a local DoS vulnerability via specially-crafted .htpasswd files

Python keyring has insecure permissions on new databases allowing world-readable files to be created

libuser has information disclosure when moving user's home directory

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack

atop: symlink attack possible due to insecure tempfile handling

Elgg through 1.7.10 has XSS

Elgg through 1.7.10 has a SQL injection vulnerability

statusnet before 0.9.9 has XSS