04 Dicembre 2025

• Debian: WebKitGTK Critical CVE-2025-43392 Exfiltration and Crash DSA-6070-1

  The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392 Tom Van Goethem discovered that a website may exfiltrate image data cross-origin.
• Debian: OpenVPN Critical HMAC Flaw Bypass CVE-2025-13086 DSA-6069-1

  It was discovered that openvpn, a virtual private network application, does not properly handle HMAC verification checks. A remote attacker can take advantage of this flaw to bypass source IP address validation. For the oldstable distribution (bookworm), this problem has been fixed in version 2.6.3-1+deb12u4.
• Debian 11: Xen Critical Privilege Escalation DSA-6068-1 CVE-2024-28956

  Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in memory disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 4.17.5+72-g01140da4e8-1.

• Getting Started with OpenShift Virtualization
  There are many reasons you might be running a virtual machine (VM) at your organization, and you're probably also using or planning to use containers at the same time. Whether you're looking to migrate away from your current virtualization platform or you're just looking for a unified platform for both VMs and containers, Red Hat OpenShift is a centralized control center for all the services you provide to your users. Here's how to get started with OpenShift Virtualization, a feature of Red Hat OpenShift.Install OpenShift and virtualization operatorsTo use OpenShift Virtualization, you must ha
• Red Hat OpenShift Service on AWS supports Capacity Reservations and Capacity Blocks for Machine Learning
  Red Hat OpenShift Service on AWS (ROSA) is a fully managed application platform that offers a more seamless experience for building, deploying, and scaling applications. For machine learning (ML) workloads, ROSA now supports On-Demand Capacity Reservations (ODCR) and Capacity Blocks for ML, allowing cloud architects and platform administrators to strategically utilize their existing AWS purchases to help deliver uninterrupted access to essential compute infrastructure. Today, ROSA is available in over 30 regions and supports over 600 instance types, allowing customers to run diverse workloads

04 Dicembre 2025

• 6.18: mainline

  Version:	6.18 (mainline)
  Released:	2025-11-30
  Source:	linux-6.18.tar.xz
  PGP Signature:	linux-6.18.tar.sign
  Patch:	full

• 6.17.10: stable

  Version:	6.17.10 (stable)
  Released:	2025-12-01
  Source:	linux-6.17.10.tar.xz
  PGP Signature:	linux-6.17.10.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.17.10

• 6.12.60: longterm

  Version:	6.12.60 (longterm)
  Released:	2025-12-01
  Source:	linux-6.12.60.tar.xz
  PGP Signature:	linux-6.12.60.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.12.60