Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

USB: serial: io_ti: fix heap overflow in get_manuf_info()

Samba: group policy certificate enrollment uses http:// without validation

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion

Inefficient candidate hostname parsing in crypto/x509

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

PostgreSQL discloses MD5-hashed passwords via covert timing channel

Incorrect boundary conditions in the JavaScript Engine: JIT component

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

The issue was addressed with improved memory handling

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

A use-after-free issue was addressed with improved memory management

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Golang-fips: golang fips zeroed buffer

Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

ip-address: XSS in Address6 HTML-emitting methods

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

This issue was addressed through improved state management

wheel Allows Arbitrary File Permission Modification via Path Traversal

Libxslt: use-after-free with key data stored cross-rvt

JIT miscompilation in the DOM: Core & HTML component

Memory safety bug fixed in Thunderbird 152

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Memory safety bug fixed in Thunderbird ESR 140.12

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Other issue in the JavaScript Engine component

No description published yet

net-imap: Command Injection via unvalidated Symbol inputs

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions