gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character

Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

net/sched: Always pass notifications when child class becomes empty

Out-of-bounds read & write in RFC 3211 KEK Unwrap

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to…

gzip integer overflow

eventfd double close

OCSP stapling bypass with GnuTLS

ASN.1 date parser overread

pam_cap: Fix potential configuration parsing error

Out-of-bounds read in HTTP client no_proxy handling

do_change_type(): refuse to operate on unmounted/not ours mounts

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

netrc and default credential leak

netrc and redirect credential leak