Gnutls: vulnerability in gnutls othername san export

Qemu: virtio: dma reentrancy issue leads to double free vulnerability

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152

Incorrect boundary conditions in the Web Audio component

Memory safety bug fixed in Thunderbird 152

Rsync < 3.4.3 Integer Overflow Information Disclosure

Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.2

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b

Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147

Mitigation bypass in the DOM: Security component

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass

Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file

Librsvg: use-after-free when xml includes have duplicated entities

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

Emacs: emacs: arbitrary code execution in flymake mode

Gimp: integer overflow when generating a thumbnail preview for a psd file

Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions

Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

Emacs: emacs: command injection via crafted filenames in tramp

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)

Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images

Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

USB: serial: kl5kusb105: fix bulk-out buffer overflow

drm/gem: Try to fix change_handle ioctl, attempt 4

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ice: fix double-free of tx_buf skb

Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

xfrm: hold dev ref until after transport_finish NF_HOOK

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader