Several security issues were fixed in Godot Engine.
Comment
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
dwarfutils could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in MuJS.
The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in libblockdev, a library for manipulating block devices. An “allow_active” user can exploit this flaw via the udisks daemon to obtain the full privileges of the root user.