Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

Glib: integer overflow in in g_escape_uri_string()

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Incorrect parsing of IPv6 host literals in net/url

Memory exhaustion in query parameter parsing in net/url

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

pyasn1 has a DoS vulnerability in decoder

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libsoup: denial of service attack to websocket server

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: path traversal vulnerability in rsync

Rsync: info leak via uninitialized stack contents

Out of bounds read in IMAP parsing

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Yelp: arbitrary file read

Vim affected by Command injection via newline in glob()

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Xorg: xmayland: use-after-free in xpresentnotify structure creation