Gstreamer: incomplete fix of cve-2026-1940

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Libsoup: libsoup: denial of service via use-after-free in http/2 server

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

ImageMagick has an uninitialized pointer dereference in JBIG decoder

Memory allocation with excessive without limits in the internal SVG decoder

ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

The issue was addressed with improved memory handling

FreeRDP has a Heap-use-after-free in cam_v4l_stream_capture_thread

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

Libxml: null pointer dereference leads to denial of service (dos)

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: --safe-links option bypass leads to path traversal

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

Gnutls: rejects certificate chain with distributed trust

Gnutls: incomplete fix for cve-2023-5981

Glibc: dos due to memory leak in getaddrinfo.c

Gvariant offset table entry size is not checked in is_normal()

net-imap vulnerable to STARTTLS stripping via invalid response timing

Out of bounds read in IMAP parsing

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX)

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Ruby: openssl: ruby marvin attack

Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

Gimp: gimp: double-free in read_layer_block()

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

Heap use-after-free in ODF number-format blank-width parsing

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Use-after-free in the DOM: Bindings (WebIDL) component

No description published yet

Use-after-free in the DOM: Networking component

libssh2 userauth.c userauth_password integer overflow

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

OpenEXR: integer overflow lead to OOB in HTJ2K decoder

Libsoup: libsoup: authentication bypass via digest authentication replay attack

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Xorg: xmayland: use-after-free in xpresentnotify structure creation