pyOpenSSL DTLS cookie callback buffer overflow

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

Gnutls: vulnerability in gnutls certtool template parsing

Gnutls: vulnerability in gnutls othername san export

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Gnutls: vulnerability in gnutls sct extension parsing

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump