Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Ipa: invalid csrf protection

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

Shim: out-of-bounds read printing error messages

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Shim: out-of-bound read in verify_buffer_sbat()

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

Shim: out of bounds read when parsing mz binaries

Pcp: pmpost symlink attack allows escalating pcp to root user

Kernel: refcount leak in ctnetlink_create_conntrack()

Postgresql: role pg_signal_backend can signal certain superuser processes.

Postgresql: memory disclosure in aggregate function calls