A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled

A permissive list of allowed inputs flaw was found in DPDK

A flaw was found in openvswitch (OVS)

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director

An authorization flaw was found in openstack-barbican

When libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it defaults to the same certificate authority as all non-libvirtd services

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied…

An information leak was found in OpenStack's undercloud

A flaw was found in OpenStack

A flaw was found in undertow

A flaw was found in the QEMU built-in VNC server

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as…

A flaw was found in openstack-keystone

A flaw was found in openstack-neutron's default Open vSwitch firewall rules

User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module

A flaw was found in Keystone

An uncontrolled resource consumption flaw was found in openstack-neutron

An uncontrolled resource consumption flaw was found in openstack-neutron

A key length flaw was found in Red Hat Ceph Storage

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU

An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by…

A vulnerability was found in openstack-nova's console proxy, noVNC

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…

A flaw was found in the openstack-barbican component

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable

A credentials leak flaw was found in OpenStack Barbican

This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal

An incomplete fix for CVE-2023-1625 was found in openstack-heat

A vulnerability was found in OpenStack Barbican containers

An information leak was discovered in OpenStack heat

An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container

A flaw was found in python-oslo-utils

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call