Libssh: use of uninitialized variable in privatekey_from_file()

Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices

Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler

Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply

Libssh: libssh: denial of service via improper configuration file handling

Networkmanager: networkmanager file access

Libssh: libssh: denial of service due to malformed sftp message

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

Libssh: memory exhaustion via repeated key exchange in libssh

Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Libarchive: libarchive: signed integer overflow in archive_write_zip_header

Libxml2: libxml2: denial of service via crafted xml catalogs

Popt-devel: popt-static: short realloc in poptconfigfiletostring

Popt-devel: popt-static: off-by-one in poptstuffargs

Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

Libxml2: stack buffer overflow in xmllint interactive shell command handling

Popt-devel: popt-static: size_t underflow in singleoptionhelp