Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path

Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null

Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header

Libopensc: incorrect handling of the length of buffers or files in pkcs15init

Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init

Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc

Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc

Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init

389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification

Gstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

Libarchive: libarchive: use-after-free via aliased mac metadata copy

Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files