Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

The issue was addressed with improved memory handling

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

Kernel: use after free in nvmet_tcp_free_crypto in nvme

Postgresql: extension script @substitutions@ within quoting allow sql injection

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Libndp: buffer overflow in route information length field

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Qemu-kvm: 'qemu-img info' leads to host file read/write

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libsoup: denial of service attack to websocket server

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: info leak via uninitialized stack contents

Ca: token authentication bypass vulnerability

389-ds-base: potential denial of service via specially crafted kerberos as-req request

Gnutls: incomplete fix for cve-2023-5981

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Yelp: arbitrary file read

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Kernel: out-of-bounds read vulnerability in smbcalcsize

Kernel: use after free bug in btsdio_remove due to race condition

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

Libsoup: heap buffer overflow in sniff_unknown()

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Libsoup: integer overflow in append_param_quoted

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Gnutls: timing side-channel in the rsa-psk authentication

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

Gnutls: vulnerable to minerva side-channel information leak