Flatpak has a complete sandbox escape leading to host file access and code execution in the host context

389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property

Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci

ipv6: fix possible UAF in icmpv6_rcv()

Heap-buffer-overflow write in planar bitmap decoder

Samba: remote code execution in samr

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

Sandbox escape in the Profile Backup component

Other issue in the WebRTC component

Incorrect boundary conditions in the Audio/Video: Playback component

Gnutls: gnutls: authentication bypass via nul character in username

tcp: fix potential race in tcp_v6_syn_recv_sock()

dlm: validate length in dlm_search_rsb_tree

Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()

ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Sandbox escape due to incorrect boundary conditions in the Networking component

Sandbox escape in the Security: Process Sandboxing component

Sandbox escape in the DOM: Navigation component

Sandbox escape in the DOM: Workers component

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710,…

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

Gnutls: gnutls: denial of service via dtls zero-length fragment

Samba: samba: remote code execution in printing subsystem via unescaped job description

Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

Gvfs: sftp: heap-based buffer overflow in read_reply()

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp

Use-after-free in the Networking: HTTP component

Privilege escalation in the Graphics: WebRender component

Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb

Heap Use-After-Free in the PKCS7_verify() Function

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL server undersizes allocations, via integer wraparound

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

redis-server RESTORE invalid memory access may allow remote code execution

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"