Axios: Allocation of Resources Without Limits or Throttling in axios

Dracut: dracut: root code execution via dhcp options command injection

Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Quadratic string concatentation in consumeComment in net/mail

Quadratic string concatenation in consumePhrase in net/mail

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Unexpected work during chain building in crypto/x509

Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation

Go JOSE affect by a panic in JWE decryption

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

Incorrect parsing of IPv6 host literals in net/url

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Rsync: info leak via uninitialized stack contents

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Podman: build context bind mount

Vim affected by Command injection via newline in glob()

smb: client: reject userspace cifs.spnego descriptions

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Icu: stack buffer overflow in the srbroot::addtag function

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

Samba: group policy certificate enrollment uses http:// without validation

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

SpdyStream: DOS on CRI

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Coredns: cd bit response is cached and served later