Auto-sync with upstream branch release/2.36/master
    
    Upstream commit: 32957eb6a86acdbeec9f38a60a7d5a0ff32db03d
    
    - Document CVE-2023-4806 and CVE-2023-5156 in NEWS
    - Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 [BZ #30843]
    - getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806)
    - io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64
    - CVE-2023-4527: Stack read overflow with large TCP responses in no-aaaa mode