Several security issues were fixed in micropython.

The following vulnerability has been discovered in the gorilla/csrf package for Go: Prior to 1.7.3, gorilla/csrf did not validate the Origin header against an allowlist. It executed its validation of the Referer header for

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. (CVE-2025-43965) In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels in an arbitrary order). (CVE-2025-46393)

Multiple vulnerabilties were discovered in u-boot, a boot loader for embedded systems.

Multiple vulnerabilities were discovered in nagvis, a visualization addon for Nagios or Icinga. CVE-2021-33178

Backport proposed fix for CVE-2025-31344 from OpenMandriva.

H2O could be made to crash if it received specially crafted network traffic.

PostgreSQL could be made to execute arbitrary code if it received specially crafted input.

* bsc#1233294 * bsc#1235431 Cross-References: * CVE-2024-50205

* bsc#1239909 Cross-References: * CVE-2025-2588

Several security issues were fixed in Mistral.

Several security issues were fixed in Mistral.

Apache Tomcat could be made to crash if it received specially crafted network traffic.

Apache Tomcat could be made to crash if it received specially crafted network traffic.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Update to version 2.10.0. Aside from the new upstream features, this update also refreshes many bundled dependencies, fixing a few CVEs. https://github.com/caddyserver/caddy/releases/tag/v2.10.0

Update to version 2.10.0. Aside from the new upstream features, this update also refreshes many bundled dependencies, fixing a few CVEs. https://github.com/caddyserver/caddy/releases/tag/v2.10.0

Heap buffer overflow in Codecs. (CVE-2025-3619) Use after free in USB. (CVE-2025-3620) References: – https://bugs.mageia.org/show_bug.cgi?id=34208

Heap buffer overflow in Codecs. (CVE-2025-3619) Use after free in USB. (CVE-2025-3620) References: – https://bugs.mageia.org/show_bug.cgi?id=34208

Juray Sarinay discovered that PDF documents signed with the adbe.pkcs7.sha1 standard were incompletely validated by LibreOffice, which could cause invalid signatures to be accepted as legitimate.

Juray Sarinay discovered that PDF documents signed with the adbe.pkcs7.sha1 standard were incompletely validated by LibreOffice, which could cause invalid signatures to be accepted as legitimate.

Several security vulnerabilities have been discovered in libsoup2.4, a http client/server library popularly used in GNOME, et.al. CVE-2025-2784

Multiple vulnerabilities have been fixed in the PDF rendering library poppler. CVE-2020-36023

* bsc#1241584 * bsc#1241585 Cross-References: * CVE-2015-3885

* bsc#1239680 Cross-References: * CVE-2025-2312

Jupyter Notebook could be made to crash if it received specially crafted input.

Update to 135.0.7049.114

Update to pgadmin-9.2.

April 2025 CPU

April 2025 CPU

April 2025 CPU

April 2025 CPU

[CVE-2025-32414] Buffer overflow when parsing text streams with Python API [CVE-2025-32415] Heap-based Buffer Overflow in xmlSchemaIDCFillNodeTables

BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refsAleandro Prudenzano of Doyensec and Edoardo Geraci of Codean Labs reported a bug in sample_conv_regsub(), which can cause replacements of multiple back-references to overflow the temporary trash buffer. The problem happens when doing “regsub(match,replacement,g)”:

* bsc#1230092 Cross-References: * CVE-2024-45310

Update to 135.0.7049.114

Update to 135.0.7049.114

New upstream version 5.8.1 (with a rebuild to try and fix a gating problem). New upstream version 5.8.1