DBI versions before 1.648 for Perl saved errors in a limited-sized buffer

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

Libxml: heap use after free (uaf) leads to denial of service (dos)

Libxml: type confusion leads to denial of service (dos)

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

Heap Use-After-Free in the PKCS7_verify() Function

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Vim modeline bypass via various options affects Vim < 9.2.0276

Gnutls: vulnerability in gnutls certtool template parsing

Gnutls: vulnerability in gnutls othername san export

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Linux-pam: incomplete fix for cve-2025-6020

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Linux-pam: linux-pam directory traversal

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Glib: integer overflow in in g_escape_uri_string()

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_proxy_html buffer overflow

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

P11-kit: null dereference via c_derivekey with specific null parameters

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Vim affected by Command injection via newline in glob()

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Gnutls: vulnerability in gnutls sct extension parsing

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Libxml2: stack buffer overflow in xmllint interactive shell command handling