Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

Inefficient candidate hostname parsing in crypto/x509

PostgreSQL discloses MD5-hashed passwords via covert timing channel

Incorrect boundary conditions in the JavaScript Engine: JIT component

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

Golang-fips: golang fips zeroed buffer

ImageMagick: Use-After-Free in MSL decoder.

Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack

389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

JIT miscompilation in the DOM: Core & HTML component

Memory safety bug fixed in Thunderbird 152

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Memory safety bug fixed in Thunderbird ESR 140.12

ImageMagick: Policy Bypass in MNG coder could

ImageMagick: Policy Bypass in PSD decoder

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Other issue in the JavaScript Engine component

net-imap: Command Injection via unvalidated Symbol inputs

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling

An attacker can cause uncontrolled memory usage with excessive bracing over IMAP

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling