ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

An issue was discovered in OpenStack Keystone before 29.0.2

An issue was discovered in OpenStack Keystone before 29.0.2

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1

Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

An issue was discovered in OpenStack Keystone before 29.0.2

An issue was discovered in idrac in OpenStack Ironic before 35.0.1

Long list of incoming EDNS options degrades performance

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0

OCSP designated-responder authorization bypass via missing signature verification

Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF)

Non-CA certificate accepted as intermediate issuer in public_key path validation

Unbound: heap-buffer-overflow in unbound

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

Unbound: null pointer dereference in unbound