Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

The issue was addressed with improved memory handling

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Kernel: use after free in nvmet_tcp_free_crypto in nvme

Postgresql: extension script @substitutions@ within quoting allow sql injection

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Openssh: regresshion - race condition in ssh allows rce/dos

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Qemu-kvm: 'qemu-img info' leads to host file read/write

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libsoup: denial of service attack to websocket server

Rsync: info leak via uninitialized stack contents

Libtiff: null pointer dereference in tif_dirinfo.c

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Gnutls: rejects certificate chain with distributed trust

Gnutls: incomplete fix for cve-2023-5981

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Yelp: arbitrary file read

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

Kernel: out-of-bounds read vulnerability in smbcalcsize

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

Libsoup: heap buffer overflow in sniff_unknown()

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Libsoup: integer overflow in append_param_quoted

Libgcrypt: vulnerable to marvin attack

Gnutls: timing side-channel in the rsa-psk authentication

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Gnutls: vulnerable to minerva side-channel information leak

Gnutls: potential crash during chain building/verification

Buildah: buildah allows arbitrary directory mount

Pcp: pmpost symlink attack allows escalating pcp to root user