pyOpenSSL DTLS cookie callback buffer overflow

Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

An issue was discovered in OpenStack Keystone before 29.0.2

An issue was discovered in OpenStack Keystone before 29.0.2

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1

Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller

An issue was discovered in idrac in OpenStack Ironic before 35.0.1

Long list of incoming EDNS options degrades performance

Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform

Etcd: incomplete fix for cve-2021-44716 in openstack platform

Etcd: incomplete fix for cve-2022-41723 in openstack platform

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0

OCSP designated-responder authorization bypass via missing signature verification

Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings

Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

Openstack: deleting a non existing access rule deletes another existing access rule in it's scope

Glance-store: glance store access key logged in debug log level

Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation

Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms

Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)

Unbound: heap-buffer-overflow in unbound

Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder

Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

Unbound: null pointer dereference in unbound