GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels

An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or…

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy…

An issue was discovered in OpenLDAP 2.x before 2.4.48

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources…

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information…

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers

In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not…

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow

A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801

nscd: netgroup cache assumes NSS callback uses in-buffer strings

A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS

X.400 address type confusion in X.509 GeneralName

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to…

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3)

GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS

netfilter: ctnetlink: ignore explicit helper on new expectations

Potential buffer overflow in ns_sprintrrf TSIG handling path

gzip integer overflow

erspan: make sure erspan_base_hdr is present in skb->head

nscd: netgroup cache may terminate daemon on memory allocation failure

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT…

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead…

The c_rehash script allows command injection

The c_rehash script allows command injection

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as…

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

netfilter: ebtables: module names must be null-terminated

netfilter: ebtables: terminate table name before find_table_lock()

isofs: bound Rock Ridge symlink components to the SL record

net: guard timestamp cmsgs to real error queue skbs

netfilter: nf_log: validate MAC header was set before dumping it

crypto: authencesn - reject short ahash digests during instance creation

ptrace: slightly saner 'get_dumpable()' logic

net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak

netfilter: x_tables: ensure names are nul-terminated

netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()

nfnetlink_osf: validate individual option lengths in fingerprints

net/sched: cls_u32: use skb_header_pointer_careful()

net: hns3: add VLAN id validation before using

tracing: Limit access to parser->buffer when trace_get_user failed

net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

software node: Correct a OOB check in software_node_get_reference_args()