Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

Libsoup: heap buffer overflow in sniff_unknown()

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Libsoup: integer overflow in append_param_quoted

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Libgcrypt: vulnerable to marvin attack

Gnutls: timing side-channel in the rsa-psk authentication

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Gnutls: vulnerable to minerva side-channel information leak

Gnutls: potential crash during chain building/verification

Buildah: buildah allows arbitrary directory mount

Pcp: pmpost symlink attack allows escalating pcp to root user