Flatpak: flatpak: arbitrary write access as root via extra-data extraction

Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

Webkitgtk: use-after-free of jscvalue function parameters

Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

Use-after-free in the Networking: HTTP component

Privilege escalation in the Graphics: WebRender component

Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Privilege escalation in the Graphics: WebRender component

Incorrect boundary conditions, integer overflow in the Graphics: Text component

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Postgresql: extension script @substitutions@ within quoting allow sql injection

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

Sandbox escape due to incorrect boundary conditions in the Telemetry component

Libxml2: double-free/uaf in libxml2 python bindings

Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize

net: pull headers in qdisc_pkt_len_segs_init()

No description published yet

Containers/image: digest type does not guarantee valid type

Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram

Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake

Gnutls: vulnerability in gnutls othername san export

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

Incorrect boundary conditions in the Web Audio component

Memory safety bug fixed in Thunderbird 152

Rsync < 3.4.3 Integer Overflow Information Disclosure

Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass

Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file

Librsvg: use-after-free when xml includes have duplicated entities

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization