Several security issues were fixed in CRaC JDK 17.

Several security issues were fixed in CRaC JDK 25.

Several security issues were fixed in CRaC JDK 21.

update to version 2.25.2

Update to 1.24.2 (rhbz#2417261) Additional fix for CVE-2025-11411 https://nlnetlabs.nl/projects/unbound/download/#unbound-1-24-2

Prevent unsafe URI schemes from participating in media playback. Make jsc_value_array_buffer_get_data() function introspectable. Fix logging in to Google accounts that have a WebAuthn second factor configured. Fix loading webkit://gpu when there are no threads configured for GPU rendering. Fix rendering gradients that use the CSS hue interpolation method.

A local file inclusion vulnerability has been discovered in mistral- dashboard, the OpenStack Workflow as a Service dashboard plugin, that may result in disclosure of arbitrary local files content through the

A local file inclusion vulnerability has been discovered in python- mistralclient, the OpenStack Workflow as a Service client, that may result in disclosure of arbitrary local files content through the

Multiple vulnerabilities have been discovered in Pagure, a Git-centered code hosting system (forge).

A possible remote code execution (RCE) vulnerability has been discovered in pytorch, an open source machine learning framework.

Update to pgadmin-9.10

Update to 2.86.2 Fix CVE-2025-13601 or #YWH-PGM9867-134

Version 0.18.1 Security Fixed critical issue where PKESK (public-key encrypted) session keys were generated as all-zero, allowing trivial decryption of messages encrypted with public keys only (CVE-2025-13402)

An update that solves 2 vulnerabilities can now be installed.

An update that solves 2 vulnerabilities can now be installed.

An update that solves 9 vulnerabilities can now be installed.

Update to 20251125: Revert “amdgpu: update GC 11.0.1 firmware” QCA: Add Bluetooth firmware for WCN685x uart interface qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 qcom: venus-5.4: update firmware binary for v5.4

Update to 4.19.0 Address CVEs by rebuilding with Go 1.24.10

* bsc#1253757 Cross-References: * CVE-2025-11563

* bsc#1245953 * bsc#1252930 * bsc#1252931 * bsc#1252932 * bsc#1252933

A race condition was discovered in Qt, a cross-platform C++ application framework. Code to make security-relevant decisions about an established HTTP2 connection may execute too early, because the encrypted() signal has not yet been emitted and processed.

* bsc#1249537 Cross-References: * CVE-2025-38616

New libxslt packages are available for Slackware 15.0 and -current to fix security issues.

Several security vulnerabilities were discovered in the server of the Tryton application platform, which could lead to information disclosure. For Debian 11 bullseye, these problems have been fixed in version

* bsc#1252110 * bsc#1252232 Cross-References: * CVE-2025-31133

* bsc#1215199 * bsc#1218644 * bsc#1230062 * bsc#1234634 * bsc#1234693

* bsc#1249191 * bsc#1249348 * bsc#1249367 * bsc#1253757

* bsc#1218644 * bsc#1238472 * bsc#1239206 * bsc#1241166 * bsc#1241637

* bsc#1253278 * bsc#1253642 * bsc#1253703 * jsc#PED-9265

* bsc#1252414 * bsc#1252417 * bsc#1252418 * jsc#PED-14233

Several vulnerabilities have been found in libssh, a tiny C SSH library. CVE-2025-4877

An update that solves one vulnerability and has one bug fix can now be installed.

An update that solves 83 vulnerabilities and has 101 bug fixes can now be installed.

FFmpeg could be made to crash if it opened a specially crafted file.

An update that solves two vulnerabilities can now be installed.

* bsc#1248672 * bsc#1249537 Cross-References: * CVE-2025-38500