cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

A use-after-free issue was addressed with improved memory management

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

Libsoup: heap buffer overflow in sniff_unknown()

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

Golang-fips: golang fips zeroed buffer

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors

Python-kdcproxy: remote dos via unbounded tcp upstream buffering

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

Libsoup: integer overflow in append_param_quoted

Libgcrypt: vulnerable to marvin attack

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

This issue was addressed through improved state management

wheel Allows Arbitrary File Permission Modification via Path Traversal

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()

Libssh: out-of-bounds read in sftp_handle()

Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Gnutls: vulnerability in gnutls sct extension parsing

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

389-ds-base: null pointer dereference leads to denial of service

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Pam: libpam: libpam vulnerable to read hashed password

Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Libsoup: integer overflow in cookie expiration date handling in libsoup

webbrowser.open() allows leading dashes in URLs