Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)

Keylime: keylime: registrar allows identity takeover via duplicate uuid registration

Gnutls: vulnerability in gnutls certtool template parsing

Gnutls: vulnerability in gnutls othername san export

NGINX ngx_http_rewrite_module vulnerability

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O…

LIBPNG has a heap buffer overflow in png_set_quantize

Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147

Mitigation bypass in the DOM: Security component

Podman: podman kube play command may overwrite host files

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

The issue was addressed with improved checks

Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access

Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free

net: bonding: fix use-after-free in bond_xmit_broadcast()

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

NGINX ngx_http_mp4_module vulnerability

NGINX ngx_http_mp4_module vulnerability

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability

OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

Arbitrary file write using cgo pkg-config directive in cmd/go

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Grub2: missing unregister call for gettext command may lead to use-after-free

Linux-pam: incomplete fix for cve-2025-6020

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

Linux-pam: linux-pam directory traversal

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Xfig: xfig: stack-overflow allows possible code execution via local input manipulation

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown