Apache HTTP Server versions 2.4.20 to 2.4.43

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

A denial of service vulnerability was found in rsyslog in the imptcp module

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the…

A flaw was found in Yelp

Libssh: libssh: stack buffer overflow in sftp server longname construction

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users