Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy

Rsync < 3.4.3 Integer Overflow Information Disclosure

Moby: Off-by-one error in plugin privilege validation

Libssh: invalid return code for chacha20 poly1305 with openssl backend

Openssh: regresshion - race condition in ssh allows rce/dos

Cri-o: cri-o: insufficient validation during container checkpoint restore

KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass

Dpdk: dpdk: double offset bug in vhost log mapping calculation

Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

net/sched: fix pedit partial COW leading to page cache corruption

net: gro: don't merge zcopy skbs

Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

gfs2: Fix use-after-free in iomap inline data write path

netfilter: flowtable: strictly check for maximum number of actions

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free

Gcc: libstdc++ integer overflow in `new` operator

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

An issue was discovered in idrac in OpenStack Ironic before 35.0.1

Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service

Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

fast-uri vulnerable to host confusion via failed IDN canonicalization

ws: Memory exhaustion DoS from tiny fragments and data chunks

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Dracut: dracut: root code execution via dhcp options command injection

Samba: denial of service against ad dc wins server

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service…

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Invalid handling of CLASS != IN

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

Crash during DNSSEC validation of malicious content

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

ws: Uninitialized memory disclosure

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Axios: unbounded recursion in toFormData causes DoS via deeply nested request data