Rsync: info leak via uninitialized stack contents

Squid: denial of service in http digest authentication

A vulnerability was found in MariaDB

A flaw was found in Keylime

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions

A flaw was found in python

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches

Apache HTTP Server versions 2.4.20 to 2.4.43

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

A denial of service vulnerability was found in rsyslog in the imptcp module

Yelp: arbitrary file read

Libssh: libssh: stack buffer overflow in sftp server longname construction

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

Ipa: invalid csrf protection

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration

A use-after-free flaw was found in libvirt

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU

There's a flaw in urllib's AbstractBasicAuthHandler class

A flaw was found in postgresql

An off-by-one error was found in the SCSI device emulation in QEMU

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

Opensc: side-channel leaks while stripping encryption pkcs#1 padding

Glibc: potential use-after-free in getaddrinfo()

Glibc: potential use-after-free in gaih_inet()

A flaw was found in the way samba implemented SMB1 authentication

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…

Xorg-x11-server: selinux unlabeled glx pbuffer

Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

Shadow-utils: possible password leak during passwd(1) change

A flaw was found in ghostscript

A flaw was found in the Linux kernel

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error…

An information disclosure flaw was found in Buildah, when building containers using chroot isolation

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0

An issue was discovered in sd-bus in systemd 239

Libssh: libssh: information disclosure via short gssapi curve25519 public key

net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously