Uninitialized memory in the Audio/Video: Web Codecs component

Vim affected by Command injection via newline in glob()

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Redis: redis: out-of-bounds read via crafted cluster bus packets

Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer

Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling

Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser

Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser

Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder

smb: client: reject userspace cifs.spnego descriptions

selinux: fix overlayfs mmap() and mprotect() access checks

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

ptrace: slightly saner 'get_dumpable()' logic

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option

Gvfs: gvfs-admin socket ownership race permits local root

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

USB: serial: io_ti: fix heap overflow in get_manuf_info()

Samba: group policy certificate enrollment uses http:// without validation

Rsync: rsync server leaks arbitrary client files

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion

Inefficient candidate hostname parsing in crypto/x509

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

PostgreSQL discloses MD5-hashed passwords via covert timing channel

Incorrect boundary conditions in the JavaScript Engine: JIT component

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS

The issue was addressed with improved memory handling

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling