BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

LIBPNG has a heap buffer overflow in png_set_quantize

Podman: podman kube play command may overwrite host files

MariaDB: wsrep SST unsafe parameter handling on the donor side

Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()

Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing

Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Possible QML code injection in VectorImage component

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

Composer is vulnerable to Command Injection via Malicious Perforce Repository

PowerShell Command Injection in Podman HyperV Machine

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

NGINX ngx_http_mp4_module vulnerability

NGINX ngx_http_mp4_module vulnerability

Arbitrary file write using cgo pkg-config directive in cmd/go

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Gcc: libstdc++ integer overflow in `new` operator

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow

Libssh: libssh: use-after-free via data callbacks on closed channels

Libssh: libssh: denial of service via automatic certificate authentication loop

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB

undici WebSocket client vulnerable to denial of service via fragment count bypass

Dracut: dracut: root code execution via dhcp options command injection

ASP.NET Core Denial of Service Vulnerability

Apache HTTP Server: mod_http2 denial of service

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_proxy_html buffer overflow

iskorotkov/avro: CPU Exhaustion in Avro Decoder

iskorotkov/avro: Integer Overflow in Avro Decoder

Invalid handling of CLASS != IN

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

Crash during DNSSEC validation of malicious content

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

Long list of incoming EDNS options degrades performance