Asim Viladi Oglu Manizada

A flaw exists in the `flatpak-system-helper` where calling the `org.freedesktop.Flatpak.SystemHelper.CancelPull` endpoint on a pull belonging to another user fails to actually cancel the operation. Instead, the pull is removed from internal tracking, which prevents the original owning user from being able to stop the ongoing pull.

An issue in the General component of MySQL Router allows an unauthenticated attacker with network access via TLS to compromise the system. Successful exploitation can lead to a hang or a frequently repeatable crash, resulting in a complete Denial of Service (DOS), which is a condition where the service becomes unavailable to its intended users.

A flaw exists in the handling of NTFS-style reparse points on shares configured with `read only = yes`. Due to missing SMB-layer access checks, authenticated users who possess underlying filesystem write permissions can create or delete reparse point metadata through SMB operations, even on read-only exports. This allows for the modification of SMB-visible file behavior, such as converting files into symbolic links or other reparse point types.

A heap-based out-of-bounds write in the DHCPv6 implementation allows local attackers to execute arbitrary code with root privileges by sending a crafted DHCPv6 packet. A heap-based out-of-bounds write occurs when a program writes data past the end of a memory buffer allocated on the heap, which can lead to memory corruption.

A flaw exists in the udisks storage management daemon that permits unprivileged users to back up LUKS encryption headers without proper authorization. This is due to a privileged D-Bus method, responsible for exporting encryption metadata, lacking a policy check. Consequently, sensitive cryptographic metadata can be read and written to locations controlled by an attacker, potentially compromising the confidentiality of encrypted storage volumes.

A heap Use-After-Free issue exists when handling Internet Cache Protocol (ICP) traffic. This allows a remote attacker to perform a reliable and repeatable Denial of Service attack, making the service unavailable. The issue is limited to deployments where ICP support is explicitly enabled by configuring a non-zero `icp port`. This cannot be mitigated by using `icp access` rules. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or memory corruption.