The 6.19.14-108 stable kernel update contains a couple if important security fixes.
May 24, 2026
Update to .NET SDK 8.0.127 and Runtime 8.0.27 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.27/8.0.127.md
May 24, 2026
Update to .NET SDK 9.0.117 and Runtime 9.0.16 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/9.0/9.0.16/9.0.117.md
May 24, 2026
Update to .NET SDK 10.0.108 and Runtime 10.0.8 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.8/10.0.108.md
May 24, 2026
Update to release v0.30.0 Resolves CVE-2026-39984: rhbz#2458929 Upstream new features and fixes
May 24, 2026
Update to release v0.34.0 Resolves: rhbz#2467576 Resolves CVE-2026-39984: rhbz#2458930 Upstream new features and fixes
May 24, 2026
A new prerelease of Python 3.15 with fixes to several CVEs.
May 24, 2026
Update NSS to 3.123.1 Update to Firefox 151.0
May 24, 2026
Update NSS to 3.123.1 Update to Firefox 151.0
May 24, 2026
An update that solves 95 vulnerabilities and has one bug fix can now be installed.
May 24, 2026
Update to .NET SDK 8.0.127 and Runtime 8.0.27 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.27/8.0.127.md
May 24, 2026
This update has improvements to generate more secure session IDs (CVE-2026-8503).
May 24, 2026
Update to .NET SDK 10.0.108 and Runtime 10.0.8 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.8/10.0.108.md
May 24, 2026
Update to .NET SDK 9.0.117 and Runtime 9.0.16 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/9.0/9.0.16/9.0.117.md
May 24, 2026
Update to release v0.30.0 Resolves CVE-2026-39984: rhbz#2458929 Upstream new features and fixes
May 24, 2026
Update to release v0.34.0 Resolves: rhbz#2467576 Resolves CVE-2026-39984: rhbz#2458930 Upstream new features and fixes
May 24, 2026
New prerelease of Python 3.15, containing fixes to a few CVEs.
May 24, 2026
Version 1.4.4 Dependencies Update Composer to 2.9.8 Version 1.4.3 add output check for dnf permission denied thanks to @asgrim and @hackel
May 24, 2026
Version 2.9.8 – 2026-05-13 Security: Fixed GitHub token validation and disclosure (GHSA-f9f8-rm49-7jv2)
May 24, 2026
An update that solves one vulnerability can now be installed.
May 24, 2026
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service or information disclosure. For Debian 11 bullseye, these problems have been fixed in version 12.22.12~dfsg-1~deb11u8. We recommend that you upgrade your nodejs packages.
May 24, 2026
Fix command injection CVE-2026-46529
May 24, 2026
new version 2.4.67
May 24, 2026
2.33.1 (2026-03-30) Bugfixes – Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. – Fixed Content-Type header parsing for malformed values.
May 24, 2026
2.33.1 (2026-03-30) Bugfixes – Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. – Fixed Content-Type header parsing for malformed values.
May 24, 2026
https://security-tracker.debian.org/tracker/DSA-6294-1
May 23, 2026
https://security-tracker.debian.org/tracker/DSA-6293-1
May 23, 2026
https://security-tracker.debian.org/tracker/DSA-6292-1
May 23, 2026
https://security-tracker.debian.org/tracker/DSA-6291-1
May 23, 2026
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.90-1. Additionally this update includes a fix for a
May 23, 2026
It was discovered that an incorrect implementation of ECDH encryption (with NIST, Brainpool, X448, or X25519 curves) within Libgcrypt could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 1.10.1-3+deb12u1.
May 23, 2026
It was discovered that atril, a simple multi-page document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For Debian 11 bullseye, this problem has been fixed in version 1.24.0-1+deb11u2.
May 23, 2026
Cem Onat Karagun discovered two vulnerabilities in the NegoEx parsing in krb5, the MIT implementation of Kerberos. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 1.20.1-2+deb12u5.
May 23, 2026
Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data
May 23, 2026
An update that fixes one vulnerability is now available.
May 23, 2026
Update to 148.0.7778.178 CVE-2026-9111: Use after free in WebRTC CVE-2026-9110: Inappropriate implementation in UI CVE-2026-9112: Use after free in GPU CVE-2026-9113: Out of bounds read in GPU
May 23, 2026
Update to .NET SDK 8.0.127 and Runtime 8.0.27 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.27/8.0.127.md
May 23, 2026
Update to .NET SDK 10.0.108 and Runtime 10.0.8 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.8/10.0.108.md
May 23, 2026
This update has improvements to generate more secure session IDs (CVE-2026-8503).
May 23, 2026
Update to .NET SDK 9.0.117 and Runtime 9.0.16 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/9.0/9.0.16/9.0.117.md
May 23, 2026
Update to release v0.34.0 Resolves: rhbz#2467576 Resolves CVE-2026-39984: rhbz#2458930 Upstream new features and fixes
May 23, 2026
Update to release v0.30.0 Resolves CVE-2026-39984: rhbz#2458929 Upstream new features and fixes
May 23, 2026
New prerelease of Python 3.15 with several CVE fixes
May 23, 2026
Version 1.4.4 Dependencies Update Composer to 2.9.8 Version 1.4.3 add output check for dnf permission denied thanks to @asgrim and @hackel
May 23, 2026
Version 2.9.8 – 2026-05-13 Security: Fixed GitHub token validation and disclosure (GHSA-f9f8-rm49-7jv2)
May 23, 2026
An update that solves 14 vulnerabilities can now be installed.
May 22, 2026