Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Grub2: bypass the grub password protection feature

Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

Libsoup: heap buffer overflow in sniff_unknown()

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

Ipa: invalid csrf protection

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

Samba: smb clients can truncate files with read-only permissions

Libvirt: stack use-after-free in virnetclientioeventloop()

Rpm-ostree: world-readable /etc/shadow file

Libsoup: integer overflow in append_param_quoted

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Libgcrypt: vulnerable to marvin attack

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

Gnutls: timing side-channel in the rsa-psk authentication

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

Kernel: stack overflow problem in open vswitch kernel module leading to dos

Shim: out-of-bounds read printing error messages

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Shim: out-of-bound read in verify_buffer_sbat()

Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.

Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c

Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Gnutls: vulnerable to minerva side-channel information leak

Shim: out of bounds read when parsing mz binaries

Gnutls: potential crash during chain building/verification

Buildah: buildah allows arbitrary directory mount

Pcp: pmpost symlink attack allows escalating pcp to root user

Kernel: refcount leak in ctnetlink_create_conntrack()

Postgresql: role pg_signal_backend can signal certain superuser processes.

Postgresql: memory disclosure in aggregate function calls