Icu: stack buffer overflow in the srbroot::addtag function

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Samba: group policy certificate enrollment uses http:// without validation

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

SpdyStream: DOS on CRI

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Coredns: cd bit response is cached and served later

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction