PgBouncer default auth_query does not take Postgres password expiry into account

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

Request smuggling due to acceptance of invalid chunked data in net/http

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Potential denial of service in golang.org/x/crypto

Unexpected memory consumption during token parsing in golang.org/x/oauth2

Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

IDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp

Insecure file handling vulnerability

Undici Uses Insufficiently Random Values

heap-buffer-overflow with visual mode in Vim < 9.1.1003

f2fs: fix potential deadloop in prepare_compress_overwrite()

md: fix mddev uaf while iterating all_mddevs list

md/raid1,raid10: don't ignore IO flags

md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb

ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

btrfs: fix block group refcount race in btrfs_create_pending_block_groups()

ext4: avoid journaling sb update on error if journal is destroying

net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.