# osquery 5.23.1

- Product: osquery (https://whatsnew.fyi/product/osquery)
- Vendor: osquery
- Date: 2026-06-24
- Version: 5.23.1
- Original notes: https://github.com/osquery/osquery/releases/tag/5.23.1
- Permalink: https://whatsnew.fyi/product/osquery/releases/5.23.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fix heap buffer overflow in Windows processes table
- **security** — Fix heap buffer overflow in Windows authenticode table
- **security** — Fix use-after-free in Linux process_file_events implementation
- **fixed** — Fix incorrect permissions on temporary file carve directories
- **fixed** — Fix documentation for process_open_handles table
- **fixed** — Fix subject2 and issuer2 columns for Windows certificates table

This is a bug and security fix release.

##### What's Changed

###### Fixes

* Fix heap buffer overflow in Windows `processes` table by @seph in https://github.com/osquery/osquery/pull/8934
* Fix heap buffer overflow in Windows `authenticode` table by @seph in https://github.com/osquery/osquery/pull/8923
* Fix use-after-free in Linux `process_file_events implementation` by @zwass in https://github.com/osquery/osquery/pull/8950
* Fix incorrect permissions on temporary file carve directories by @zwass in https://github.com/osquery/osquery/pull/8961
* Fix documentation for `process_open_handles` table by @seph in https://github.com/osquery/osquery/pull/8853
* Fix `subject2` and `issuer2` columns for Windows `certificates` table by @getvictor in https://github.com/osquery/osquery/pull/8963

**Full Changelog**: https://github.com/osquery/osquery/compare/5.23.0...5.23.1