Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Timing side-channel in SM2 algorithm on 64 bit ARM

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association

Out-of-bounds read in HTTP client no_proxy handling