Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret

Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding

Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std

Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts

Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml

Gcc: integer wrap in `std

Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)

Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute

Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers

Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder

Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check