Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

Sssd: sssd: access control bypass via premature ldap access rule evaluation

Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.

Samba: group policy certificate enrollment uses http:// without validation

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Rsync: rsync server leaks arbitrary client files

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write

Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

Pcp: unsafe use of directories allows pcp to root privilege escalation

Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image

Nautilus: nautilus: arbitrary file deletion via trash symlink

Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr