CVEs affecting projects tracked on Release Alert, from NVD & OSV.
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).