net: skbuff: preserve shared-frag marker during coalescing

crypto: algif_aead - Revert to operating out-of-place

An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1

Samba: remote code execution in samr

Gnutls: gnutls: authentication bypass via nul character in username

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

lodash vulnerable to Code Injection via `_.template` imports key names

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710,…

Gnutls: gnutls: denial of service via dtls zero-length fragment

gRPC-Go has an authorization bypass via missing leading slash in :path

Libxml: heap use after free (uaf) leads to denial of service (dos)

Libxml: type confusion leads to denial of service (dos)

Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

xfrm: esp: avoid in-place decrypt on shared skb frags

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Code execution vulnerability in SWIG code generation in cmd/go

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Potential code smuggling via doc comments in cmd/cgo

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams

Podman: podman missing tls verification

Containers/image: digest type does not guarantee valid type

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

Vim modeline bypass via various options affects Vim < 9.2.0276

Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O…

LIBPNG has a heap buffer overflow in png_set_quantize

Podman: podman kube play command may overwrite host files

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

net/sched: fix pedit partial COW leading to page cache corruption

net: gro: don't merge zcopy skbs

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

netfilter: flowtable: strictly check for maximum number of actions

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…

Arbitrary file write using cgo pkg-config directive in cmd/go

Grub2: missing unregister call for gettext command may lead to use-after-free

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Glib: integer overflow in in g_escape_uri_string()

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export