Kernel: null pointer dereference in nvmet_tcp_build_iovec

Gnutls: rejects certificate chain with distributed trust

Gnutls: incomplete fix for cve-2023-5981

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

Squid: dos against http and https

Samba: infinite loop in mdssvc rpc service for spotlight

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Yelp: arbitrary file read

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Kernel: oob access in smb2_dump_detail

Kernel: out-of-bounds read vulnerability in smbcalcsize

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

Kernel: gsm multiplexing race condition leads to privilege escalation