Update to latest upstream (142.0.1) Updated to new upstream release (142.0)
https://security-tracker.debian.org/tracker/DSA-5992-1
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1240414 Cross-References: * CVE-2025-31115
* bsc#1238078 * bsc#1243450 * bsc#1244116 Cross-References:
* bsc#1220262 Cross-References: * CVE-2023-50782
* bsc#1244270 * bsc#1244272 * bsc#1244273 * bsc#1244279 * bsc#1244336
* bsc#1248502 Cross-References: * CVE-2025-8067
* bsc#1248502 Cross-References: * CVE-2025-8067
* bsc#1248502 Cross-References: * CVE-2025-8067
* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:
https://security-tracker.debian.org/tracker/DSA-5990-1
https://security-tracker.debian.org/tracker/DSA-5991-1
https://security-tracker.debian.org/tracker/DSA-5988-1
https://security-tracker.debian.org/tracker/DSA-5987-1
* bsc#1246472 Cross-References: * CVE-2025-7519
* bsc#1244270 * bsc#1244272 * bsc#1244273 * bsc#1244279 * bsc#1244336
* bsc#1246597 Cross-References: * CVE-2025-6965
* bsc#1245573 Cross-References: * CVE-2025-6297
* bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299
* bsc#1244554 * bsc#1244555 * bsc#1244557 * bsc#1244580 * bsc#1244700
https://security-tracker.debian.org/tracker/DSA-5989-1
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
fix CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
Update to upstream version 0.2.8 Update idna dependency to a version not affected by CVE-2024-12224
fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494) fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
An update that solves two vulnerabilities and has one errata is now available.
An update that solves two vulnerabilities and has one errata is now available.
* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:
* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
https://security-tracker.debian.org/tracker/DSA-5986-1
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1234018 * bsc#1234019 * bsc#1234020 * bsc#1245313 * bsc#1246790
* bsc#1239547 * bsc#1239863 * bsc#1239864 * bsc#1247562 * bsc#1247563
https://security-tracker.debian.org/tracker/DSA-5985-1
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NVIDIA/nvidia-container-toolkit version to 1.17.8 for CVE-2025-23266 and CVE-2025-23267
https://security-tracker.debian.org/tracker/DSA-5984-1
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to 1.67.0 Update to 1.66.0
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
* bsc#1248006 Cross-References: * CVE-2025-55159
Several security issues were fixed in PHP.
* bsc#1248006 Cross-References: * CVE-2025-55159
Several security issues were fixed in Python.
Update to version 0.4.11. This version includes a fix for CVE-2025-55159, but there are zero packages in Fedora or EPEL that use the affected API, so no rebuilds are necessary.
Update to v1.136.0 Update to 1.135.2 Update to 1.135.0
https://security-tracker.debian.org/tracker/DSA-5983-1
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape or bypass of the same-origin policy.
poppler could be made to denial of service if it received a specially crafted PDF file.
* bsc#1245218 * bsc#1247350 * bsc#1247351 Cross-References:
* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
https://security-tracker.debian.org/tracker/DSA-5981-1
https://security-tracker.debian.org/tracker/DSA-5982-1
* bsc#1244270 * bsc#1244272 * bsc#1244273 * bsc#1244279 * bsc#1244336
* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
Several security issues were fixed in Apache HTTP Server.
Several security issues were fixed in libxml2.
* bsc#1012628 * bsc#1139073 * bsc#1204142 * bsc#1210025 * bsc#1211226
https://security-tracker.debian.org/tracker/DSA-5980-1
* bsc#1242666 * bsc#1243428 Cross-References: * CVE-2025-3416
* bsc#1244631 * bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
https://security-tracker.debian.org/tracker/DSA-5979-1
* bsc#1236217 * bsc#1246118 * bsc#1247719 * bsc#1247720 * jsc#SLE-18320
* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
* bsc#1244631 * bsc#1245218 * bsc#1245350 * bsc#1245989 * bsc#1247350
* bsc#1244337 * bsc#1247350 * bsc#1247351 Cross-References:
* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
https://security-tracker.debian.org/tracker/DSA-5978-1
