Buildah: buildah allows arbitrary directory mount

Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder

Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check

Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound

Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter.

Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection

Samba: vfs_streams_xattr uninitialized memory write possible

Openshift-console: openshift console: path traversal

Sssd: sssd: denial of service via malformed pam v1 requests

Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function