Rsync: path traversal vulnerability in rsync

Rsync: info leak via uninitialized stack contents

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Out of bounds read in IMAP parsing

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

Pam: improper hostname interpretation in pam_access leads to access control bypass

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

Vim affected by Command injection via newline in glob()

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

ptrace: slightly saner 'get_dumpable()' logic

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Icu: stack buffer overflow in the srbroot::addtag function

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

The issue was addressed with improved memory handling

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

Golang-fips: golang fips zeroed buffer

Libgcrypt: vulnerable to marvin attack

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

This issue was addressed through improved state management

Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Gnutls: vulnerability in gnutls sct extension parsing

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

webbrowser.open() allows leading dashes in URLs