Samba: remote code execution in samr

Gnutls: gnutls: authentication bypass via nul character in username

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

lodash vulnerable to Code Injection via `_.template` imports key names

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710,…

Gnutls: gnutls: denial of service via dtls zero-length fragment

gRPC-Go has an authorization bypass via missing leading slash in :path

Libxml: heap use after free (uaf) leads to denial of service (dos)

Libxml: type confusion leads to denial of service (dos)