The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

redis-server RESTORE invalid memory access may allow remote code execution

smb: client: validate the whole DACL before rewriting it in cifsacl

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

Libxml2: double-free/uaf in libxml2 python bindings

Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Vim modeline bypass via various options affects Vim < 9.2.0276

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension…

Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url

Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

Incorrect boundary conditions in the Web Audio component

Memory safety bug fixed in Thunderbird 152

Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2

redis-server Lua use-after-free may allow remote code execution

ERB has an @_init deserialization guard bypass via def_module / def_method / def_class

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow

Libvirt: swtpm privilege escalation via symlink following

Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection

Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images

Gimp: gimp: integer overflow in read_rle_channel()

Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ipc: limit next_id allocation to the valid ID range

net/sched: fix pedit partial COW leading to page cache corruption

Heap buffer overflow in Calc formula compilation

PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

net: gro: don't merge zcopy skbs

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()