Update to 128.12.0 https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-55/
USN-7626-1 introduced a regression in Git
* bsc#1245309 * bsc#1245310 * bsc#1245311 * bsc#1245314
* bsc#1065729 * bsc#1156395 * bsc#1193629 * bsc#1194869 * bsc#1198410
* bsc#1244081 Cross-References: * CVE-2025-5601
* bsc#1244081 Cross-References: * CVE-2025-5601
* bsc#1243902 Cross-References: * CVE-2025-40908
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
https://security-tracker.debian.org/tracker/DSA-5960-1
Several security issues were fixed in libssh.
USN-7010-1 introduced a regression in DCMTK
Sekou Diakite from HPE discovered a mistake with permission handling for Coordinators within the accounting system of Slurm Workload Manager, a cluster resource management and job scheduling system, that it could allow a Coordinator to promote a user to Administrator.
* bsc#1227270 * bsc#1227271 * bsc#1227353 * bsc#1228097 * bsc#1233165
Several security issues were fixed in jQuery.
https://security-tracker.debian.org/tracker/DSA-5961-1
Antonio Morales discovered an out-of-bounds write in the MMRDecoder::scanruns method in djvulibre, a library and set of tools to handle documents in the DjVu format, which may result in the execution of arbitrary code if a specially crafted document is processed.
* bsc#1243061 * bsc#1243804 * bsc#1243913 Cross-References:
5.2.0 release
Integer overflow on 32-bit systems has been fixed in the XMedCon toolkit for medical image conversion. For Debian 11 bullseye, this problem has been fixed in version
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these problems have been fixed in
Update to 3.6.4 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4
https://security-tracker.debian.org/tracker/DSA-5959-1
PGSQL: Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735) SOAP: Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP
A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in the xls2csv utility version 0.95. (CVE-2024-48877) An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. (CVE-2024-52035)
* bsc#1243314 * bsc#1243332 * bsc#1243422 * bsc#1243423
* bsc#1236931 * bsc#1239119 Cross-References: * CVE-2025-30258
Cracking the code of a successful cybersecurity career starts here. Hear from ESET’s Robert Lipovsky as he reveals how to break into and thrive in this fast-paced field.
Some schemes might sound unbelievable, but they’re easier to fall for than you think. Here’s how to avoid getting played by gamified job scams.
Update bundled pbkdf2 library.
* bsc#1245309 * bsc#1245310 * bsc#1245311 * bsc#1245314
* bsc#1238063 * bsc#1244136 Cross-References: * CVE-2025-0620
Deep cuts in cybersecurity spending risk creating ripple effects that will put many organizations at a higher risk of falling victim to cyberattacks
