Security update for valkey

Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11

Security update for helm

Security update for sccache

Security update for MozillaFirefox

Security update for glib2

rsync: rsync: Directory escape via TOCTOU race condition in rrsync rsync: rsync: Unauthorized File Access via Symlink Module Root rsync: rsync: Arbitrary file write via path traversal in --relative mode rsync: rsync: Arbitrary file deletion via malicious file list rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options rsync: rsync: Arbitrary File Read via Symlink Following rsync: rsync: Local Privilege Escalation via Symlink Following rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure rsync: rsync: Denial of Service via Algorithmic Complexity rsync: rsync: Heap Out-of-Bounds Write via crafted argument list rsync: rsync: Memory corruption via crafted file entries rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink rsync: rsync: Information disclosure and denial of service via crafted files-from entry rsync: rsync: Authorization bypass via `auth users` directive parsing rsync: rsync: Denial of Service via handshake stall

expat: Expat: Denial of Service via quadratic complexity in attribute processing expat: Expat: XML Injection via Malformed UTF-16 Input

gvfs: SFTP: heap-based buffer overflow in read_reply() gvfs: gvfs-admin socket ownership race permits local root

gvfs: SFTP: heap-based buffer overflow in read_reply()