Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

pip can extract console_scripts and gui_scripts outside installation directory

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace

Libxml2: stack buffer overflow in xmllint interactive shell command handling