Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

Use-after-free in the DOM: Bindings (WebIDL) component

Use-after-free in the DOM: Networking component

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Uninitialized memory in the Audio/Video: Web Codecs component

Vim affected by Command injection via newline in glob()

Xorg: xmayland: use-after-free in xpresentnotify structure creation

Xorg: xwayland: use-after-free in xkb client resource removal

Xorg: xmayland: value overflow in xkbsetcompatmap()

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

Gimp: multiple use after free in xcf parser

Gimp: multiple heap buffer overflows in tga parser

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer

Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling

smb: client: reject userspace cifs.spnego descriptions

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking

Libblockdev: lpe from allow_active to root in libblockdev via udisks