Cri-o: cri-o checkpoint restore bypasses destination security context

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

Cri-o: cri-o: insufficient validation during container checkpoint restore

Gcc: libstdc++ integer overflow in `new` operator

Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service

Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if