Update to gstreamer-1.26.11.

It was discovered that libxml-parser-perl, a Perl module for parsing XML files, was prone to an off-by-one heap buffer overflow in `st_serial_stack()`. This update also includes a follow-up improvement change for CVE-2006-10002 (buffer overwrite in `parse_stream()`.) For Debian 11 bullseye, these problems have been fixed in version

Security fix for CVE-2026-4519

The update fixes CVS-2026-25061

GSSAPI server: Boundary check gss_wrap token (read OOB)

Security fix for CVE-2026-4519.

Security fix for CVE-2026-4519.

It was discovered that pyasn1, a generic ASN.1 library for Python, is prone to a denial of service vulnerability when decoding ASN.1 data with deeply nested structures. For the oldstable distribution (bookworm), this problem has been fixed in version 0.4.8-3+deb12u2.

Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 2:2.4-2+deb12u3.

Update to upstream 2.5.2, including fixes for CVE-2026-33757 and CVE-2026-33758

Update to 9.21.20 (rhbz#2440560) Security Fixes: Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. (CVE-2026-1519) Fix memory leaks in code preparing DNSSEC proofs of non-existence.

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.177-1~deb12u1.

An update that solves two vulnerabilities can now be installed.

Moderate: mariadb:10.11 security update

Undertow would allow unintended access to user sessions over the network.

CVE-2026-4897 aisle.com fix of unsanitized getline

Security fix for CVE-2026-4519

Automatic update for crun-1.27-1.fc43. Changelog for crun * Wed Mar 25 2026 Packit – 1.27-1 – Update to 1.27 upstream release * Mon Dec 22 2025 Packit – 1.26-1

Fix CVE-2026-31812: Bump tar-rs to .5.45 – Closes rhbz#2449672

Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2026-31958 Introduce new limits on the size and complexity of multipart bodies, including a default limit of 100 parts per request to mitigate a

An update that solves three vulnerabilities and has one security fix can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves nine vulnerabilities can now be installed.

An update that solves two vulnerabilities can now be installed.

An update that solves nine vulnerabilities can now be installed.

Several security issues were fixed in Pillow.

An update that solves 25 vulnerabilities can now be installed.

An update that solves 25 vulnerabilities can now be installed.

Several security issues were fixed in pyasn1.

Several security issues were fixed in ImageMagick.

MGAA-2026-0024 – Updated zynaddsubfx packages fix bug

Multiple vulnerabilities were discovered in asterisk, an Open Source Private Branch Exchange (PBX) and telephony toolkit. CVE-2026-23738 XSS vulnerability in the /httpstatus page. Cookie names/values and GET parameter names/values are rendered without HTML-escaping, allowing

An update that solves 655 vulnerabilities, contains four features and has 57 fixes can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves two vulnerabilities can now be installed.

An update that solves eight vulnerabilities can now be installed.

An update that solves seven vulnerabilities can now be installed.

MGASA-2026-0073 – Updated python-ujson packages fix security vulnerabilities

MGASA-2026-0072 – Updated strongswan packages fix security vulnerability

Security fix for CVE-2026-4519.

Security fix for CVE-2026-4519.

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

MGASA-2026-0071 – Updated nodejs packages fix security vulnerabilities

MGASA-2026-0070 – Updated libpng packages fix security vulnerabilities

Update to 146.0.7680.164 * High CVE-2026-4673: Heap buffer overflow in WebAudio * High CVE-2026-4674: Out of bounds read in CSS * High CVE-2026-4675: Heap buffer overflow in WebGL * High CVE-2026-4676: Use after free in Dawn

Update to v2.0.52

Update to 1.23.1

Update to 1.23.1

An update that solves seven vulnerabilities can now be installed.

An update that solves eight vulnerabilities can now be installed.

An update that solves two vulnerabilities can now be installed.

An update that solves nine vulnerabilities can now be installed.

An update that solves eight vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves two vulnerabilities and has one security fix can now be installed.

An update that solves nine vulnerabilities can now be installed.

An update that solves two vulnerabilities can now be installed.

An update that solves 10 vulnerabilities can now be installed.

An update that solves 10 vulnerabilities can now be installed.

Update to 146.0.7680.164 * High CVE-2026-4673: Heap buffer overflow in WebAudio * High CVE-2026-4674: Out of bounds read in CSS * High CVE-2026-4675: Heap buffer overflow in WebGL * High CVE-2026-4676: Use after free in Dawn

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.164-1~deb12u1.

Update to release v1.9.1

Update to 146.0.7680.153 * CVE-2026-4439: Out of bounds memory access in WebGL * CVE-2026-4440: Out of bounds read and write in WebGL * CVE-2026-4441: Use after free in Base * CVE-2026-4442: Heap buffer overflow in CSS

Update to version 1.3.1 to fix CVE-2026-28356.

Update to release v1.9.1 Resolves: rhbz#2448053, rhbz#2423997, rhbz#2424031 Upstream fixes

Update to 146.0.7680.153 * CVE-2026-4439: Out of bounds memory access in WebGL * CVE-2026-4440: Out of bounds read and write in WebGL * CVE-2026-4441: Use after free in Base * CVE-2026-4442: Heap buffer overflow in CSS

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

An update that solves 11 vulnerabilities and has two security fixes can now be installed.

An update that solves 11 vulnerabilities and has two security fixes can now be installed.

An update that solves one vulnerability and has two security fixes can now be installed.