Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

The issue was addressed with improved memory handling

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Kernel: use after free in nvmet_tcp_free_crypto in nvme

Postgresql: extension script @substitutions@ within quoting allow sql injection

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: info leak via uninitialized stack contents

Yelp: arbitrary file read

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

Pcp: pmpost symlink attack allows escalating pcp to root user