Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Unbounded name compression in certain cases causes degradation of service

Jostle logic bypass degrades resolution performance

Apache Thrift: c_glib dispatch stack overflow

Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure

Gnutls: vulnerability in gnutls sct extension parsing

Ring: some aes functions may panic when overflow checking is enabled in ring

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Avahi: avahi wide-area dns predictable transaction ids

Avahi: avahi wide-area dns uses constant source port

Content spoofing

Service monitor mac flow is not rate limited

Grub2: commands/extcmd: missing check for failed allocation

Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string

Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption

Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return

Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation

Binutils: binutils: denial of service via crafted elf file

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

Grub2: use-after-free in net_set_vlan

Grub2: missing unregister call for normal_exit command may lead to use-after-free

Grub2: missing unregister call for normal commands may lead to use-after-free

Grub2: use-after-free in grub_file_close()

Oauth-server-container: oauth-server-container logs client secret in debug level

Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links

Grub2: grub2: out-of-bounds write via malicious usb device

Unbound: heap-buffer-overflow in unbound

Sssd: sssd: denial of service via race condition in autofs responder

Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder

Sssd: sssd: denial of service via use-after-free in kcm ticket renewal

Libssh: null pointer dereference in libssh kex session id calculation

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction

Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers

Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory

Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access

Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation

Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape

Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

Luksmeta: data corruption when handling luks1 partitions with luksmeta

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

Grub2: fs/hfs+: refcount can be decremented twice

Cert-manager: potential dos when parsing specially crafted pem inputs