Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

netfilter: flowtable: strictly check for maximum number of actions

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…

Arbitrary file write using cgo pkg-config directive in cmd/go

Grub2: missing unregister call for gettext command may lead to use-after-free

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch

Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Glib: integer overflow in in g_escape_uri_string()

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials

Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler

Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints

Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

fast-uri vulnerable to host confusion via failed IDN canonicalization

undici WebSocket client vulnerable to denial of service via fragment count bypass

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Dracut: dracut: root code execution via dhcp options command injection

Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend

Invalid handling of CLASS != IN

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Quadratic string concatentation in consumeComment in net/mail

Crash when handling long CNAME response in net

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Unexpected work during chain building in crypto/x509

Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation

Go JOSE affect by a panic in JWE decryption

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Incorrect parsing of IPv6 host literals in net/url

Memory exhaustion in query parameter parsing in net/url

Qemu-kvm: vnc websocket handshake use-after-free

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2