jfs: Prevent copying of nlink with value 0 from disk inode

jfs: add sanity check for agwidth in dbMount

f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()

ext4: ignore xattrs past end

Elasticsearch Improper Authentication

Elasticsearch Insertion of sensitive information in log file

SMM IDT Privilege Escalation Vulnerability

PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service

AMD: CVE-2025-36357 Transient Scheduler Attack in L1 Data Queue

AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue

Chromium: CVE-2025-3620 Use after free in USB

Chromium: CVE-2025-3619 Heap buffer overflow in Codecs

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE

KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

Windows Installer Elevation of Privilege Vulnerability

Azure Functions Remote Code Execution Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability