The issue was addressed with improved memory handling

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Pcp: exposure of the redis server backend allows remote command execution via pmproxy

Postgresql: buffer overrun from integer overflow in array modification

Kernel: use after free in nvmet_tcp_free_crypto in nvme

Postgresql: extension script @substitutions@ within quoting allow sql injection

runc container breakout through process.cwd trickery and leaked fds

Shim: rce in http boot support may lead to secure boot bypass

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Libndp: buffer overflow in route information length field

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Qemu-kvm: 'qemu-img info' leads to host file read/write

Xorg-x11-server: use-after-free in procrenderaddglyphs

Xorg-x11-server: heap buffer overflow in disabledevice

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

Insights-client: unsafe handling of temporary files and directories

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

Tracker-miners: sandbox escape

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

Rsync: info leak via uninitialized stack contents

Ca: token authentication bypass vulnerability

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

Squid: denial of service in http digest authentication

Squid: dos against http and https

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

Yelp: arbitrary file read

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

Kernel: gsm multiplexing race condition leads to privilege escalation