gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character

wifi: cfg80211: fix use-after-free in cmp_bss()

Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

scsi: lpfc: Fix buffer free/clear order in deferred receive path

net/sched: Always pass notifications when child class becomes empty

Out-of-bounds read & write in RFC 3211 KEK Unwrap

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

Out of bounds read for cookie path

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to…

gzip integer overflow

i40e: Fix potential invalid access when MAC list is empty

batman-adv: fix OOB read/write in network-coding decode

eventfd double close

Timing side-channel in SM2 algorithm on 64 bit ARM

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324…

OCSP stapling bypass with GnuTLS

ASN.1 date parser overread

pam_cap: Fix potential configuration parsing error

Out-of-bounds read in HTTP client no_proxy handling

tee: fix NULL pointer dereference in tee_shm_put

pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()

do_change_type(): refuse to operate on unmounted/not ours mounts

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324…

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324…

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4…

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

netrc and default credential leak

netrc and redirect credential leak

GNU ncurses parse_entry.c postprocess_termcap stack-based overflow