Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Vim affected by Command injection via newline in glob()

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

PostgreSQL discloses MD5-hashed passwords via covert timing channel

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

Tar: tar: hidden file injection via crafted archives

Libxslt: use-after-free with key data stored cross-rvt

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape

Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

webbrowser.open() allows leading dashes in URLs

Libxml2: stack buffer overflow in xmllint interactive shell command handling