[Tracker] Merge security fixes for v0.8.5

[russellb]

This issue is for tracking that pending security fixes are merged prior to releasing v0.8.5

• GHSA-hj4w-hm2g-p6w5 - [Security] Use safe serialization and fix zmq setup for mooncake pipe #17192
• GHSA-9f8f-2vmf-885j - [Security] Don't bind tcp zmq socket to all interfaces #17197

[russellb]

PRs have been posted and added to the milestone. That will work for tracking now, so I'll close this.