Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is…

A vulnerability was found in MariaDB

A flaw was found in Keylime

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions

A flaw was found in python

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches

Apache HTTP Server versions 2.4.20 to 2.4.43

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

A denial of service vulnerability was found in rsyslog in the imptcp module

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the…

A flaw was found in Yelp

Libssh: libssh: stack buffer overflow in sftp server longname construction

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel

A flaw was found in libsoup

A vulnerability was found in Podman, Buildah, and CRI-O

net-snmp provides various tools relating to the Simple Network Management Protocol

net-snmp provides various tools relating to the Simple Network Management Protocol

net-snmp provides various tools relating to the Simple Network Management Protocol

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA

A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration

A use-after-free flaw was found in libvirt

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU

There's a flaw in urllib's AbstractBasicAuthHandler class

A flaw was found in postgresql

An off-by-one error was found in the SCSI device emulation in QEMU

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

A flaw was found in Booth, a cluster ticket manager

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant

Glibc: potential use-after-free in getaddrinfo()

A flaw was found in the way samba implemented SMB1 authentication

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…

A heap overflow flaw was found in 389-ds-base

A flaw was found in the X.Org server

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel

A flaw was found in shadow-utils

A flaw was found in ghostscript

A flaw was found in the Linux kernel

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection