Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

Libssh: libssh: denial of service via oversized sftp read length

Libssh: libssh: denial of service via zero advertised channel packet size

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Libarchive: libarchive: denial of service via malformed iso file processing

Libssh: improper sanitation of paths received from scp servers

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Tar: tar: hidden file injection via crafted archives

Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

Libssh: libssh: denial of service via sftp responses with unknown request ids

Libssh: libssh: information disclosure via short gssapi curve25519 public key

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

Binutils: binutils: denial of service via crafted elf file