Information disclosure due to incorrect boundary conditions in the Audio/Video component

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Use-after-free in the JavaScript Engine component

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component

Use-after-free in the WebRTC component

Use-after-free in the DOM: Core & HTML component

Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default

Unexpected work during chain building in crypto/x509

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Corosync: corosync: denial of service via integer overflow in join message validation

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory

Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage

ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response

Squid vulnerable to Denial of Service in ICP Request handling

Squid has Denial of Service in ICP Response handling

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

ImageMagick has an uninitialized pointer dereference in JBIG decoder

Incorrect parsing of IPv6 host literals in net/url

Memory allocation with excessive without limits in the internal SVG decoder

ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

The issue was addressed with improved memory handling

Memory exhaustion in query parameter parsing in net/url

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libsoup: denial of service attack to websocket server

Rsync: path traversal vulnerability in rsync

Rsync: info leak via uninitialized stack contents

net-imap vulnerable to STARTTLS stripping via invalid response timing

Gnutls: gnutls: security bypass due to incorrect name constraint handling