The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

A denial of service vulnerability was found in rsyslog in the imptcp module

Yelp: arbitrary file read

Libssh: libssh: stack buffer overflow in sftp server longname construction

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap