Sandbox escape due to incorrect boundary conditions in the Networking component

Sandbox escape in the Security: Process Sandboxing component

Sandbox escape in the DOM: Navigation component

Sandbox escape in the DOM: Workers component

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()

Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

Flatpak: flatpak: arbitrary write access as root via extra-data extraction

Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

Use-after-free in the Networking: HTTP component

Privilege escalation in the Graphics: WebRender component

Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb

Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151

Privilege escalation in the Graphics: WebRender component

Incorrect boundary conditions, integer overflow in the Graphics: Text component

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Use-after-free in the Storage: IndexedDB component

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PostgreSQL missing validation of multibyte character length executes arbitrary code

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Use-after-free in the IPC component

Sandbox escape due to integer overflow in the Graphics component

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

The issue was addressed with improved memory handling

Libssh: incorrect return code handling in ssh_kdf() in libssh

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

Postgresql: extension script @substitutions@ within quoting allow sql injection

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

Sandbox escape due to incorrect boundary conditions in the Telemetry component

Buildah: buildah: container escape via improper bind mount validation

Libxml2: double-free/uaf in libxml2 python bindings

Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize

net: pull headers in qdisc_pkt_len_segs_init()

No description published yet

Containers/image: digest type does not guarantee valid type

Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram

Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake

Gnutls: vulnerability in gnutls certtool template parsing

Gnutls: vulnerability in gnutls othername san export

Qemu: virtio: dma reentrancy issue leads to double free vulnerability