Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname…

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion

Inefficient candidate hostname parsing in crypto/x509

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

PostgreSQL discloses MD5-hashed passwords via covert timing channel

Incorrect boundary conditions in the JavaScript Engine: JIT component

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

ip-address: XSS in Address6 HTML-emitting methods

Python-kdcproxy: remote dos via unbounded tcp upstream buffering

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

wheel Allows Arbitrary File Permission Modification via Path Traversal

Libxslt: use-after-free with key data stored cross-rvt

JIT miscompilation in the DOM: Core & HTML component

Memory safety bug fixed in Thunderbird 152

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Memory safety bug fixed in Thunderbird ESR 140.12

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Other issue in the JavaScript Engine component

net-imap: Command Injection via unvalidated Symbol inputs

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

An attacker can cause uncontrolled memory usage with excessive bracing over IMAP

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

webbrowser.open() allows leading dashes in URLs

Libxml2: stack buffer overflow in xmllint interactive shell command handling