multiparty vulnerable to Denial of Service via unbounded part-header accumulation

Stolostron/multicluster-observability-addon: cross-namespace secret disclosure in multicluster-observability-addon via unvalidated configuration references

Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser

Stack overflow in nscd due to unbounded alloca use

Gvfs: gvfs-admin socket ownership race permits local root

cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options

Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction

Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown

Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs