Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

Use-after-free in the DOM: Bindings (WebIDL) component

No description published yet

Use-after-free in the DOM: Networking component

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning

Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing

Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag

Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

Redis: redis: out-of-bounds read via crafted cluster bus packets

Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images