ipv6: fix possible UAF in icmpv6_rcv()

netfilter: conntrack: remove sprintf usage

netfilter: nf_conntrack_sip: don't use simple_strtoul

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

net/x25: Fix potential double free of skb

mptcp: fix slab-use-after-free in __inet_lookup_established

net: stmmac: fix integer underflow in chain mode

net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

scanf %mc off-by-one heap buffer overflow

netfilter: nf_conntrack_expect: use expect->helper

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()

An integer overflow can be triggered in SQLite’s `concat_ws()` function

nfsd: clear acl_access/acl_default after releasing them

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character

An issue was discovered in libexpat before 2.6.3

An issue was discovered in libexpat before 2.6.3

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints

A vulnerability was found in GNU C Library 2.38

sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been…

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate…

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins

In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final…

RSA implementation bug in AVX512IFMA instructions

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES

The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating…

The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating…

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow

There's a flaw in lz4

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free

A flaw was found in gnutls

A flaw was found in gnutls

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept…

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations