The issue was addressed with improved memory handling

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

Kernel: use after free in nvmet_tcp_free_crypto in nvme

Postgresql: extension script @substitutions@ within quoting allow sql injection

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Openssh: regresshion - race condition in ssh allows rce/dos

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Libndp: buffer overflow in route information length field

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Qemu-kvm: 'qemu-img info' leads to host file read/write

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libsoup: denial of service attack to websocket server

Rsync: info leak via uninitialized stack contents

Libtiff: null pointer dereference in tif_dirinfo.c

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Ca: token authentication bypass vulnerability

389-ds-base: potential denial of service via specially crafted kerberos as-req request

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Gnutls: rejects certificate chain with distributed trust

Gnutls: incomplete fix for cve-2023-5981

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Yelp: arbitrary file read

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

Kernel: out-of-bounds read vulnerability in smbcalcsize

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9