Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

Libsoup: heap buffer overflow in sniff_unknown()

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Ipa: invalid csrf protection

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

Samba: smb clients can truncate files with read-only permissions

Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

Libsoup: integer overflow in append_param_quoted

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

Gnutls: timing side-channel in the rsa-psk authentication

Samba: out-of-bounds read in winbind auth_crap

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

Shim: out-of-bounds read printing error messages

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Shim: out-of-bound read in verify_buffer_sbat()

Shadow-utils: possible password leak during passwd(1) change

Kernel: smsusb: use-after-free caused by do_submit_urb()

Gnutls: vulnerable to minerva side-channel information leak

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

Samba: spotlight server-side share path disclosure

Samba: type confusion in mdssvc rpc service for spotlight

Shim: out of bounds read when parsing mz binaries

Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h

Buildah: buildah allows arbitrary directory mount

Pcp: pmpost symlink attack allows escalating pcp to root user

Kernel: refcount leak in ctnetlink_create_conntrack()

Postgresql: role pg_signal_backend can signal certain superuser processes.

Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()

Postgresql: memory disclosure in aggregate function calls

Postgresql: merge fails to enforce update or select row security policies