Gnutls: gnutls: authentication bypass via nul character in username

Libssh: libssh: authentication bypass via missing gssapi principal check

A flaw was found in libssh

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

NGINX ngx_http_rewrite_module vulnerability

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Libssh: libssh: use-after-free via data callbacks on closed channels

Libssh: libssh: denial of service via automatic certificate authentication loop

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Libxml2: libxml2: denial of service via crafted xsd-validated document

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

P11-kit: null dereference via c_derivekey with specific null parameters

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Libssh: libssh: stack buffer overflow in sftp server longname construction

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

Libssh: libssh: denial of service via oversized sftp read length

Libssh: libssh: denial of service via zero advertised channel packet size

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

A flaw was found in libarchive

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

A flaw was found in libxml2, an XML parsing library

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Tar: tar: hidden file injection via crafted archives

Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

Libssh: libssh: denial of service via sftp responses with unknown request ids

Libssh: libssh: information disclosure via short gssapi curve25519 public key

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

Binutils: binutils: denial of service via crafted elf file

Libssh: libssh: information disclosure via proxycommand %r username expansion

Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled

A flaw was found in the libxml2 library