Xorg: xmayland: use-after-free in xpresentnotify structure creation

Xorg: xwayland: use-after-free in xkb client resource removal

Xorg: xmayland: value overflow in xkbsetcompatmap()

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

Gimp: multiple use after free in xcf parser

Gimp: multiple heap buffer overflows in tga parser

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

ptrace: slightly saner 'get_dumpable()' logic

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

Libblockdev: lpe from allow_active to root in libblockdev via udisks

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

A use-after-free issue was addressed with improved memory management

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors

Python-kdcproxy: remote dos via unbounded tcp upstream buffering

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

This issue was addressed through improved state management

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

Libssh: out-of-bounds read in sftp_handle()

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Buildah: buildah allows arbitrary directory mount

Pcp: pmpost symlink attack allows escalating pcp to root user

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Libsoup: integer overflow in cookie expiration date handling in libsoup

webbrowser.open() allows leading dashes in URLs