This issue was discovered by Found by AISLE in partnership with Red Hat.

Device-mapper-multipath: local denial of service via blocking ipc send operations

Parted: parted: denial of service via heap buffer overflow during fat16 resize

Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()

Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames

Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack

Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling

Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr

Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion

Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message

Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services