Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Libssh: improper sanitation of paths received from scp servers

Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts

Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml

Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml

Sssd: sssd: denial of service via incomplete identity provider authentication requests

Sssd: sssd: denial of service via crafted passkey kerberos authentication request

Device-mapper-multipath: local denial of service via blocking ipc send operations

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Libxml2: memory leak leading to local denial of service in xmllint interactive shell

Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

Sssd: sssd: information disclosure via odata injection in entra id lookups

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

React Router vulnerable to XSS via Open Redirects

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Grub2: read: integer overflow may lead to out-of-bounds write

Luksmeta: missing slot-range validation permits out-of-gap device i/o

Cri-o: cri-o: unvalidated image env var causes daemon crash

Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd

Sssd: sssd: denial of service via missing sid extension in certificate mapping

Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin

Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes

Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown

Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs

Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service

Rsync: race condition in rsync handling symbolic links

Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination

Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd

Sssd: sssd-kcm: local denial of service via excessive memory preallocation

Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass

Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

Sssd: sssd: denial of service via undersized packet parsing in nss responder

Sssd: sssd: denial of service via out-of-bounds read in pam responder

Sssd: sssd: denial of service via unbounded negative cache growth

Sssd: sssd: denial of service via packet length underflow in autofs responder

Sssd: sssd: denial of service via memory exhaustion in kcm responder

Sssd: sssd: denial of service via unprivileged autofs cache invalidation

Sssd: sssd: denial of service via memory exhaustion in autofs responder

Sssd: sssd: denial of service via out-of-bounds read in autofs responder

Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute

Podman: arbitrary file write when importing oci archive

Sssd: sssd: denial of service in nss responder via crafted zero-length requests