Temporary plugin file created with insecure permissions

Jenkins creates a temporary file when a plugin is uploaded from an administrator's computer. Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates this temporary file in the system temporary directory with the default permissions for newly created files. If these permissions are overly...

PT-2021-6916

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 8.1.1 Description The issue is caused by a heap-based buffer overflow in the Pillow library when decoding crafted YCbCr files, potentially allowing a remote attacker to impact the confidentiality and integrity of...