graphite2 could be made to crash or run programs if it opened a specially crafted file.

Multiple security vulnerabilities were discovered in LibreOffice, which could result in denial of service or potentially the execution of arbitrary code if malformed files are opened. For Debian 12 bookworm, these problems have been fixed in version 4:7.4.7-1+deb12u13.

The system could be made to run programs as an administrator.

Several security issues were fixed in the Linux kernel.

The system could be compromised under certain conditions.

Update NSS to 3.124.0 Update Firefox to 152.0

Update NSS to 3.124.0 Update Firefox to 152.0

Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432

Update to 149.0.7827.114 CVE-2026-12007: Use after free Core CVE-2026-12008: Use after free DigitalCredentials CVE-2026-12009: Insufficient validation of untrusted input Accessibility CVE-2026-12010: Heap buffer overflow GPU

x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] Arm: Completion of memory accesses not guaranteed by completion of a TLBI [XSA-493, CVE-2025-10263] x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]

Update to 1.9.2 for CVE-2026-10846

Version 0.16.0 – 2026-06-08 Security Fix out-of-bounds read via undersized frames in amqp_handle_input (GHSA-9mmv-r8g3-qp46, #878) Fix client crash when server negotiates frame_max below the AMQP protocol

CVE-2026-34253 – fix arbitrary code execution via buffer underflow

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics

33.0.5 Release

This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers). It also improves examples.

Fix arbitrary memory write with crafted Ventana BIF file (CVE-2026-48977).

Fix editor command injection vulnerability (only affectsversion 2.6.0). (#1432) https://github.com/jonas/tig/issues/1432

BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork behavior in collision with graceful restart BGP: Fix crash on dumping pending export statistics

33.0.5 Release

This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers). It also improves examples.

Fix arbitrary memory write with crafted Ventana BIF file (CVE-2026-48977).

Update to version 3.10.0

Security update

Security update

Security update

# Security update for distribution Announcement ID: SUSE-SU-2026:2413-1 Release Date: 2026-06-16T12:20:29Z Rating: important References:

# Security update for runc Announcement ID: SUSE-SU-2026:2414-1 Release Date: 2026-06-16T12:22:39Z Rating: important References:

# Security update for buildah Announcement ID: SUSE-SU-2026:2415-1 Release Date: 2026-06-16T12:23:37Z Rating: important References:

# Security update for buildah Announcement ID: SUSE-SU-2026:2416-1 Release Date: 2026-06-16T12:24:12Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:2420-1 Release Date: 2026-06-16T14:05:08Z Rating: important References:

An update that solves eight vulnerabilities can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 60 vulnerabilities and has four fixes can now be installed.

An update that solves 107 vulnerabilities and has 11 fixes can now be installed.

An update that solves one vulnerability can now be installed.

Several security issues were fixed in OpenImageIO.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

USN-8412-1 introduced a regression in QEMU

Several issues have been found in asterisk, an Open Source Private Branch Exchange (PBX). They are related to buffer under- or overflows, either on heap or on stack. Some are related to use-after-free or wrong processing of invalid or untrusted certificates. For Debian 11 bullseye, these problems have been fixed in version

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves five vulnerabilities can now be installed.

An update that solves three vulnerabilities can now be installed.

# Security update for containerized-data-importer Announcement ID: SUSE-SU-2026:2407-1 Release Date: 2026-06-16T07:47:27Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

An update that solves four vulnerabilities and has one security fix can now be installed.

An update that solves four vulnerabilities and has one security fix can now be installed.

An update that solves one vulnerability and has one security fix can now be installed.

Several security issues were fixed in rabbitmq-c.

Several security issues were fixed in Squid.

The CA certificates in the ca-certificates package were updated.

An update that solves one vulnerability can now be installed.

An update that solves 3 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

Several security issues were fixed in FreeRDP.

Ruby could allow unintended access to network services.

USN-8349-1 introduced regressions in rsync.