Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Use-after-free in the DOM: Bindings (WebIDL) component

No description published yet

Use-after-free in the DOM: Networking component

libssh2 userauth.c userauth_password integer overflow

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

OpenEXR: integer overflow lead to OOB in HTJ2K decoder

Libsoup: libsoup: authentication bypass via digest authentication replay attack

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Xorg: xmayland: use-after-free in xpresentnotify structure creation

Xorg: xwayland: use-after-free in xkb client resource removal

Xorg: xmayland: value overflow in xkbsetcompatmap()

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

Gimp: multiple use after free in xcf parser

Gimp: multiple heap buffer overflows in tga parser

Gimp: stack-based buffer overflows in file-ico

Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling

Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Emacs: emacs: memory corruption vulnerability when processing svg css

Gimp: gimp: application crashes or information disclosure via crafted icns image files

OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)

Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Kernel: out-of-bounds read vulnerability in smbcalcsize

Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

Gvfs: gvfs-admin socket ownership race permits local root

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()