An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec

Information disclosure due to incorrect boundary conditions in the Audio/Video component

Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default

Unexpected work during chain building in crypto/x509

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Incorrect parsing of IPv6 host literals in net/url

Incorrect enforcement of email constraints in crypto/x509

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

net-imap vulnerable to STARTTLS stripping via invalid response timing

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules

Gimp: gimp: heap buffer overflow in read_channel_data()

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

Use-after-free in the DOM: Bindings (WebIDL) component

Use-after-free in the DOM: Networking component

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

Redis: redis: out-of-bounds read via crafted cluster bus packets

Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer

Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling

Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder

smb: client: reject userspace cifs.spnego descriptions

selinux: fix overlayfs mmap() and mprotect() access checks

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

Gvfs: gvfs-admin socket ownership race permits local root

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…