Generic Kernel version-release: kernel-5.15.186.1-1
Add DigiCert root CAs to ca-certificates-base
Fix check of unwrapped key size in openssl
Patch atop for CVE-2025-31160
Patch bind for CVE-2025-8677, CVE-2025-40778 and CVE-2025-40780
Patch ceph for CVE-2024-47866
Patch cmake for CVE-2025-5916, CVE-2025-5917, CVE-2025-5918
Patch containerized-data-importer for CVE-2025-58183
Patch cri-o for CVE-2025-58183
Patch dhcp for CVE-2024-11187
Patch fluent-bit for CVE-2025-12977 and CVE-2025-12969, CVE-2025-12970
Patch gcc for CVE-2021-32256
Patch glib for CVE-2025-13601
Patch haproxy for CVE-2025-11230
Patch kubevirt for CVE-2025-64324
Patch libssh for CVE-2025-8114, CVE-2025-8277
Patch libtiff for CVE-2025-8961
Patch libxslt for CVE-2025-11731
Patch moby-engine for CVE-2025-58183
Patch moby-containerd for CVE-2025-64329, CVE-2024-25621
Patch moby-compose for CVE-2025-47913
Patch moby-containerd-cc for CVE-2025-64329, CVE-2024-25621
Patch nodejs18 for CVE-2025-5222
Patch packer for CVE-2025-47913
Patch postgresql for CVE-2025-12817, CVE-2025-12818
Patch python3 for CVE-2025-6075
Patch pytorch for CVE-2025-55552, CVE-2025-55560
Patch qemu for CVE-2024-7409
Patch reaper for CVE-2018-19827, CVE-2018-19797, CVE-2025-12816, CVE-2025-66031 and CVE-2025-66030
Patch rsync for CVE-2025-10158
Patch skopeo for CVE-2025-58183
Patch unbound for CVE-2025-11411
Upgrade libpng to 1.6.52 for CVE-2025-64505, CVE-2025-64506, CVE-2025-65018, CVE-2025-64720, CVE-2025-66293
Upgrade msft-golang to 1.24.11
Upgrade postgresql to 14.20 for CVE-2025-12817, CVE-2025-12818
Upgrade runc to v1.2.8
Upgrade tzdata to 2025b