In April 2019 the Pallets Jinja templating engine patched a high-severity sandbox-escape bug (CVE-2019-10906) by releasing Jinja 2.10.1; Microsoft’s public advisory for that CVE lists Azure Linux as an affected Microsoft product, but that listing does not mean Azure Linux is the only Microsoft...
The LibTIFF codebase contains a long‑standing, practical memory‑safety defect tracked as CVE‑2016‑9535 — a heap buffer overflow in the predictor/tile handling code — that was introduced in the 4.0.6 release and patched in subsequent versions. This vulnerability arises in tif_predict.c /...