ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response

Squid vulnerable to Denial of Service in ICP Request handling

Squid has Denial of Service in ICP Response handling

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Incorrect parsing of IPv6 host literals in net/url

The issue was addressed with improved memory handling

Memory exhaustion in query parameter parsing in net/url

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Qemu-kvm: vnc websocket handshake use-after-free

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: path traversal vulnerability in rsync

net-imap vulnerable to STARTTLS stripping via invalid response timing

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Out of bounds read in IMAP parsing

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

Use-after-free in the DOM: Bindings (WebIDL) component

Use-after-free in the DOM: Networking component

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

Vim affected by Command injection via newline in glob()

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Xorg: xmayland: use-after-free in xpresentnotify structure creation

Xorg: xwayland: use-after-free in xkb client resource removal

Xorg: xmayland: value overflow in xkbsetcompatmap()

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer