Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

netrc and default credential leak

netrc and redirect credential leak

libxml2 xmlcatalog xmlParseSGMLCatalog recursion

GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions)

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data

Libxml2: stack buffer overflow in xmllint interactive shell command handling

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

can: etas_es58x: allow partial RX URB allocation to succeed

dmaengine: omap-dma: fix dma_pool resource leak in error paths

null_blk: fix kmemleak by releasing references to fault configfs items

can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak

phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()

usb: storage: sddr55: Reject out-of-bound new_pba

sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto

net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak

be2net: pass wrb_params in case of OS2BMC

Input: cros_ec_keyb - fix an invalid memory access

net: openvswitch: remove never-working support for setting nsh fields