Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion

Inefficient candidate hostname parsing in crypto/x509

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

PostgreSQL discloses MD5-hashed passwords via covert timing channel

Incorrect boundary conditions in the JavaScript Engine: JIT component

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

The issue was addressed with improved memory handling

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Golang-fips: golang fips zeroed buffer

Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

ip-address: XSS in Address6 HTML-emitting methods

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

Libxslt: use-after-free with key data stored cross-rvt

JIT miscompilation in the DOM: Core & HTML component

Memory safety bug fixed in Thunderbird 152

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Memory safety bug fixed in Thunderbird ESR 140.12

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Other issue in the JavaScript Engine component

No description published yet

net-imap: Command Injection via unvalidated Symbol inputs

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

An attacker can cause uncontrolled memory usage with excessive bracing over IMAP

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

webbrowser.open() allows leading dashes in URLs

Libxml2: stack buffer overflow in xmllint interactive shell command handling