Combination of DNS64 and RPZ Can Lead to Crash

An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c

An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"

An error processing RPZ rules can cause named to loop endlessly after handling a query

An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone…

named exits with a REQUIRE assertion failure if it receives a null command string on its control channel

Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has…

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files