Rsync: race condition in rsync handling symbolic links

Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon

Oc: oc: symlink/hardlink target validation bypass in oc image extract allows file write outside destination

Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd

Sssd: sssd-kcm: local denial of service via excessive memory preallocation

Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass

Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

Sssd: sssd: denial of service via undersized packet parsing in nss responder

Sssd: sssd: denial of service via out-of-bounds read in pam responder

Sssd: sssd: denial of service via unbounded negative cache growth

Sssd: sssd: denial of service via packet length underflow in autofs responder

Sssd: sssd: denial of service via memory exhaustion in kcm responder

Sssd: sssd: denial of service via unprivileged autofs cache invalidation

Sssd: sssd: denial of service via memory exhaustion in autofs responder

Sssd: sssd: denial of service via out-of-bounds read in autofs responder

Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute

Podman: arbitrary file write when importing oci archive

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr

Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

pip can extract console_scripts and gui_scripts outside installation directory

Efivar: efivar: denial of service due to stack overflow in device path node parsing

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

Nano: nano: format string vulnerability leads to denial of service

Sssd: out-of-bounds read in the sssd

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

Libssh: libssh: denial of service via inefficient regular expression processing

Polkit: polkit: denial of service via unbounded input processing through standard input

wheel Allows Arbitrary File Permission Modification via Path Traversal

Libxslt: use-after-free with key data stored cross-rvt

Openvswitch don't match packets on nd_target field

Sssd: sssd: access control bypass via improper ldap shadow expiration check

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

Libssh: out-of-bounds read in sftp_handle()

Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation

Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms

Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding

Sssd: sssd: information disclosure via query injection in entra id lookups

Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path

Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses

Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crash

Samba: dns signing dos via tkey name cache exhaustion

Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering