Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute

Podman: arbitrary file write when importing oci archive

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

pip can extract console_scripts and gui_scripts outside installation directory

Efivar: efivar: denial of service due to stack overflow in device path node parsing

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Nano: nano: format string vulnerability leads to denial of service

Sssd: out-of-bounds read in the sssd

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

Libssh: libssh: denial of service via inefficient regular expression processing

Polkit: polkit: denial of service via unbounded input processing through standard input

wheel Allows Arbitrary File Permission Modification via Path Traversal

Libxslt: use-after-free with key data stored cross-rvt

Sssd: sssd: access control bypass via improper ldap shadow expiration check

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

Libssh: out-of-bounds read in sftp_handle()

Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding

Sssd: sssd: information disclosure via query injection in entra id lookups

Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path

Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses

Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crash

Samba: dns signing dos via tkey name cache exhaustion

Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Unbounded name compression in certain cases causes degradation of service

Jostle logic bypass degrades resolution performance

Apache Thrift: c_glib dispatch stack overflow

Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure

Gnutls: vulnerability in gnutls sct extension parsing

Ring: some aes functions may panic when overflow checking is enabled in ring

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Avahi: avahi wide-area dns predictable transaction ids

Avahi: avahi wide-area dns uses constant source port

Grub2: commands/extcmd: missing check for failed allocation

Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string

Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption