Gnutls: incomplete fix for cve-2023-5981

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

Squid: dos against http and https

Samba: infinite loop in mdssvc rpc service for spotlight

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Yelp: arbitrary file read

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Kernel: oob access in smb2_dump_detail

Kernel: out-of-bounds read vulnerability in smbcalcsize

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

Kernel: gsm multiplexing race condition leads to privilege escalation

Kernel: use after free bug in btsdio_remove due to race condition

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

Libsoup: heap buffer overflow in sniff_unknown()

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Ipa: invalid csrf protection

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

Samba: smb clients can truncate files with read-only permissions

Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

Libsoup: integer overflow in append_param_quoted

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

Gnutls: timing side-channel in the rsa-psk authentication

Samba: out-of-bounds read in winbind auth_crap

389-ds-base: malformed userpassword hash may cause denial of service

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Pcp: pmcd heap corruption through metric pmstore operations

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

Shim: out-of-bounds read printing error messages

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Shim: out-of-bound read in verify_buffer_sbat()

Shadow-utils: possible password leak during passwd(1) change

Kernel: smsusb: use-after-free caused by do_submit_urb()

Gnutls: vulnerable to minerva side-channel information leak

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

Samba: spotlight server-side share path disclosure

Samba: type confusion in mdssvc rpc service for spotlight

Shim: out of bounds read when parsing mz binaries

Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h

Buildah: buildah allows arbitrary directory mount