Update NSS to 3.123.1 Update to Firefox 151.0

Update NSS to 3.123.1 Update to Firefox 151.0

An update that solves 95 vulnerabilities and has one bug fix can now be installed.

Update to .NET SDK 8.0.127 and Runtime 8.0.27 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.27/8.0.127.md

This update has improvements to generate more secure session IDs (CVE-2026-8503).

Update to .NET SDK 10.0.108 and Runtime 10.0.8 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.8/10.0.108.md

Update to .NET SDK 9.0.117 and Runtime 9.0.16 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/9.0/9.0.16/9.0.117.md

Update to release v0.30.0 Resolves CVE-2026-39984: rhbz#2458929 Upstream new features and fixes

Update to release v0.34.0 Resolves: rhbz#2467576 Resolves CVE-2026-39984: rhbz#2458930 Upstream new features and fixes

New prerelease of Python 3.15, containing fixes to a few CVEs.

Version 1.4.4 Dependencies Update Composer to 2.9.8 Version 1.4.3 add output check for dnf permission denied thanks to @asgrim and @hackel

Version 2.9.8 – 2026-05-13 Security: Fixed GitHub token validation and disclosure (GHSA-f9f8-rm49-7jv2)

An update that solves one vulnerability can now be installed.

Multiple vulnerabilities were discovered in Node.js, which could result in denial of service or information disclosure. For Debian 11 bullseye, these problems have been fixed in version 12.22.12~dfsg-1~deb11u8. We recommend that you upgrade your nodejs packages.

Fix command injection CVE-2026-46529

new version 2.4.67

2.33.1 (2026-03-30) Bugfixes – Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. – Fixed Content-Type header parsing for malformed values.

2.33.1 (2026-03-30) Bugfixes – Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. – Fixed Content-Type header parsing for malformed values.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.90-1. Additionally this update includes a fix for a

It was discovered that an incorrect implementation of ECDH encryption (with NIST, Brainpool, X448, or X25519 curves) within Libgcrypt could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 1.10.1-3+deb12u1.

It was discovered that atril, a simple multi-page document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For Debian 11 bullseye, this problem has been fixed in version 1.24.0-1+deb11u2.

Cem Onat Karagun discovered two vulnerabilities in the NegoEx parsing in krb5, the MIT implementation of Kerberos. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 1.20.1-2+deb12u5.

An update that fixes one vulnerability is now available.

Update to 148.0.7778.178 CVE-2026-9111: Use after free in WebRTC CVE-2026-9110: Inappropriate implementation in UI CVE-2026-9112: Use after free in GPU CVE-2026-9113: Out of bounds read in GPU

Update to .NET SDK 8.0.127 and Runtime 8.0.27 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.27/8.0.127.md

Update to .NET SDK 10.0.108 and Runtime 10.0.8 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/10.0/10.0.8/10.0.108.md

This update has improvements to generate more secure session IDs (CVE-2026-8503).

Update to .NET SDK 9.0.117 and Runtime 9.0.16 Fixes: CVE-2026-32175,CVE-2026-32177,CVE-2026-35433,CVE-2026-42899 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/9.0/9.0.16/9.0.117.md

Update to release v0.34.0 Resolves: rhbz#2467576 Resolves CVE-2026-39984: rhbz#2458930 Upstream new features and fixes

Update to release v0.30.0 Resolves CVE-2026-39984: rhbz#2458929 Upstream new features and fixes

New prerelease of Python 3.15 with several CVE fixes

Version 1.4.4 Dependencies Update Composer to 2.9.8 Version 1.4.3 add output check for dnf permission denied thanks to @asgrim and @hackel

Version 2.9.8 – 2026-05-13 Security: Fixed GitHub token validation and disclosure (GHSA-f9f8-rm49-7jv2)

An update that solves 14 vulnerabilities can now be installed.

An update that solves 20 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves three vulnerabilities can now be installed.

An update that solves two vulnerabilities can now be installed.

An update that solves three vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

Multiple vulnerabilities were found in GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, which may lead to constraint bypass, denial of service, information disclosure, authentication bypass or potentially execution of arbitrary code.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

An update that solves one vulnerability can now be installed.

An update that solves 11 vulnerabilities can now be installed.

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For Debian 11 bullseye, these problems have been fixed in version 1:140.11.0esr-1~deb11u1. We recommend that you upgrade your thunderbird packages.

Path-to-Regexp could be made to crash if it received specially crafted network traffic.

An update that fixes 16 vulnerabilities is now available.

Evince could be made to run programs as your login if it opened a specially crafted file.

# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:2042-1 Release Date: 2026-05-22T05:53:16Z Rating: important References:

# Security update for rekor Announcement ID: SUSE-SU-2026:2043-1 Release Date: 2026-05-22T05:54:19Z Rating: important References:

An update that can now be installed.

# Security update for rootlesskit Announcement ID: SUSE-SU-2026:2044-1 Release Date: 2026-05-22T05:54:39Z Rating: important References:

An update that can now be installed.

# Security update for rootlesskit Announcement ID: SUSE-SU-2026:2045-1 Release Date: 2026-05-22T05:55:22Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

# Security update for kernel-livepatch-MICRO-6-0_Update_22 Announcement ID: SUSE-SU-2026:21723-1 Release Date: 2026-05-19T16:42:46Z Rating: important References:

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability and has three fixes can now be installed.

An update that solves 15 vulnerabilities, contains one feature and has two fixes can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

An update that fixes 5 vulnerabilities is now available.

The 7.0.9-105/205 stable kernel updates contain a couple if important security fixes.

The 7.0.9-105/205 stable kernel updates contain a couple if important security fixes.

Automatic update for cockpit-362-1.fc44. Changelog for cockpit * Wed May 20 2026 Packit – 362-1 – Bug fixes and translation updates – Fix arbitrary code execution via specially crafted logs page link

Update to 20260519: ASoC: tas2783: Add Firmware files for tas2783A projects add firmware for MT7927 WiFi device Add HP ISH firmware for Intel Panther Lake systems ti: Add PCM6240 firmware with multiple audio profiles support

Several security issues were fixed in PostgreSQL.

Multiple vulnerabiliites have been discovered in the PowerDNS DNS server, which could result in denial of service or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 4.9.15-0+deb13u1. We recommend that you upgrade your pdns packages.