EUVD-2021-29491

Malicious code in bioql PyPI...

CVE-2021-42522

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'gfree' to release the return value of 'xmlGetProp'...

CVE-2021-42522

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'gfree' to release the return value of 'xmlGetProp'...

CVE-2018-18718: Double Free

An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the addthemesfromdir method in dlg-contact-sheet.c because of two successive calls of gfree, each of which frees the same buffer...

Updated librsvg packages fix security vulnerabilities

Atte Kettunen's fuzz testing found several vulnerabilities in librsvg: - Invalid memory access caused by incorrect handling of a pattern paint server with an xlink:href to a unexpected type bgo744299 - Infinite loop in the handling of gradients bgo738169 - Heap-buffer-overflow when there's a...