Rsync: info leak via uninitialized stack contents

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Openshift/telemeter: iss check during jwt authentication can be bypassed

Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Podman: build context bind mount

Cri-o: checkpoint restore can be triggered from different namespaces

Pam: improper hostname interpretation in pam_access leads to access control bypass

Vim affected by Command injection via newline in glob()

smb: client: reject userspace cifs.spnego descriptions

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege…

Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()

Icu: stack buffer overflow in the srbroot::addtag function

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Samba: group policy certificate enrollment uses http:// without validation

Samba: missing access check on reparse point operations

Samba: vfs_worm does not block directory modification

SpdyStream: DOS on CRI

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect

wheel Allows Arbitrary File Permission Modification via Path Traversal

Libssh: out-of-bounds read in sftp_handle()

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Openshift-console: openshift console: server-side request forgery

Graphql: information disclosure via graphql introspection in openshift

Openshift-console: unauthenticated data exposure

Coredns: cd bit response is cached and served later

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction

Buildah: buildah allows arbitrary directory mount

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled