Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

An issue was discovered in OpenStack Keystone before 29.0.2

An issue was discovered in OpenStack Keystone before 29.0.2

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

An issue was discovered in OpenStack Keystone before 29.0.2

An issue was discovered in idrac in OpenStack Ironic before 35.0.1

Long list of incoming EDNS options degrades performance

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0

Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Non-CA certificate accepted as intermediate issuer in public_key path validation

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results