A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions

Apache HTTP Server versions 2.4.20 to 2.4.43

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

A flaw was found in Yelp

Libssh: libssh: stack buffer overflow in sftp server longname construction

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or…

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel

A flaw was found in libsoup

A vulnerability was found in Podman, Buildah, and CRI-O

net-snmp provides various tools relating to the Simple Network Management Protocol

net-snmp provides various tools relating to the Simple Network Management Protocol

net-snmp provides various tools relating to the Simple Network Management Protocol

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA

A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration

A use-after-free flaw was found in libvirt

There's a flaw in urllib's AbstractBasicAuthHandler class

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

A flaw was found in Booth, a cluster ticket manager

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant

Glibc: potential use-after-free in getaddrinfo()

Glibc: potential use-after-free in gaih_inet()

A flaw was found in the way samba implemented SMB1 authentication

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…

A heap overflow flaw was found in 389-ds-base

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel

A flaw was found in the Linux kernel

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory…

An issue was discovered in sd-bus in systemd 239

Libssh: libssh: information disclosure via short gssapi curve25519 public key

net-snmp provides various tools relating to the Simple Network Management Protocol

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service…

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area

A vulnerability was found in Buildah

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the…

In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted,…

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with…

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'