The issue was addressed with improved memory handling

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

Pcp: exposure of the redis server backend allows remote command execution via pmproxy

Postgresql: buffer overrun from integer overflow in array modification

Kernel: use after free in nvmet_tcp_free_crypto in nvme

Postgresql: extension script @substitutions@ within quoting allow sql injection

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Buildah: buildah: container escape via improper bind mount validation

runc container breakout through process.cwd trickery and leaked fds

Shim: rce in http boot support may lead to secure boot bypass

Kernel: ebpf: insufficient stack type checks in dynptr

Openssh: regresshion - race condition in ssh allows rce/dos

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

Libndp: buffer overflow in route information length field

Xorg: xwayland: use-after-free in syncinittrigger()

Xorg: xwayland: use-after-free in playreleasedevents()

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

X.org: xwayland: use-after-free of the root cursor

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Networkmanager-libreswan: local privilege escalation via leftupdown

Qemu-kvm: 'qemu-img info' leads to host file read/write

Xorg-x11-server: use-after-free in procrenderaddglyphs

Xorg-x11-server: heap buffer overflow in disabledevice

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

Tracker-miners: sandbox escape

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

Libsoup: out of bounds reads in soup_headers_parse_request()

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

Libsoup: denial of service attack to websocket server

Rsync: info leak via uninitialized stack contents

Libtiff: null pointer dereference in tif_dirinfo.c

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Ca: token authentication bypass vulnerability

389-ds-base: potential denial of service via specially crafted kerberos as-req request

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

Kernel: null pointer dereference in __nvmet_req_complete

Kernel: null pointer dereference in nvmet_tcp_execute_request