Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service

• CVE-2023-5868 Medium 4.3 Postgresql: memory disclosure in aggregate function calls 2.8%
• CVE-2023-5869 High 8.8 Postgresql: buffer overrun from integer overflow in array modification 4.3%
• CVE-2023-46847 High 8.6 Squid: denial of service in http digest authentication 78.5%
• CVE-2023-5824 High 7.5 Squid: dos against http and https 3.3%
• CVE-2023-46846 Critical 9.3 Squid: request/response smuggling in http/1.1 and icap 7.2%
• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-3972 High 7.8 Insights-client: unsafe handling of temporary files and directories 0.3%
• CVE-2023-5367 High 7.8 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty 0.6%
• CVE-2023-5557 High 7.5 Tracker-miners: sandbox escape 0.8%
• CVE-2023-5157 High 7.5 Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 2.3%
• CVE-2023-42753 High 7.0 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 0.5%
• CVE-2023-3899 High 7.8 Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration 0.2%
• CVE-2023-4459 Medium 5.5 Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() 0.2%
• CVE-2023-39417 High 7.5 Postgresql: extension script @substitutions@ within quoting allow sql injection 1.7%
• CVE-2023-4004 High 7.8 Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() 0.9%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%