Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Icu: stack buffer overflow in the srbroot::addtag function

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Timing side-channel in SM2 algorithm on 64 bit ARM

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association

Out-of-bounds read in HTTP client no_proxy handling