04 Dicembre 2025

• Debian: WebKitGTK Critical CVE-2025-43392 Exfiltration and Crash DSA-6070-1

  The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392 Tom Van Goethem discovered that a website may exfiltrate image data cross-origin.
• Debian: OpenVPN Critical HMAC Flaw Bypass CVE-2025-13086 DSA-6069-1

  It was discovered that openvpn, a virtual private network application, does not properly handle HMAC verification checks. A remote attacker can take advantage of this flaw to bypass source IP address validation. For the oldstable distribution (bookworm), this problem has been fixed in version 2.6.3-1+deb12u4.
• Debian 11: Xen Critical Privilege Escalation DSA-6068-1 CVE-2024-28956

  Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in memory disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 4.17.5+72-g01140da4e8-1.

• Solving tool overload, one automation step at a time
  Modern IT departments are wrestling with a sprawling array of automation and operations tools, often numbering in the dozens or even hundreds. This complexity makes efficient management and integration a significant obstacle, especially as organizations accelerate their investment in hybrid IT ecosystems, cloud services, and cloud-native application modernization. To help overcome this "tool sprawl" and its impact on productivity, enterprises are working to establish a common environment for orchestrating and managing critical IT processes—a "unified IT automation platform."To understand the
• Red Hat OpenShift sandboxed containers 1.11 and Red Hat build of Trustee 1.0 accelerate confidential computing across the hybrid cloud
  Red Hat is excited to announce the release of Red Hat OpenShift sandboxed containers 1.11 and Red Hat build of Trustee 1.0, marking a significant milestone in our confidential computing journey. These releases bring production-grade support for confidential containers in Microsoft Azure Red Hat OpenShift and introduce technology preview support for bare metal environments with Intel TDX and AMD SEV-SNP processors. Organizations can now protect their most sensitive workloads with hardware-based memory encryption and attestation capabilities across cloud and on-premises infrastructure. OpenShift

04 Dicembre 2025

• 6.18: mainline

  Version:	6.18 (mainline)
  Released:	2025-11-30
  Source:	linux-6.18.tar.xz
  PGP Signature:	linux-6.18.tar.sign
  Patch:	full

• 6.17.10: stable

  Version:	6.17.10 (stable)
  Released:	2025-12-01
  Source:	linux-6.17.10.tar.xz
  PGP Signature:	linux-6.17.10.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.17.10

• 6.12.60: longterm

  Version:	6.12.60 (longterm)
  Released:	2025-12-01
  Source:	linux-6.12.60.tar.xz
  PGP Signature:	linux-6.12.60.tar.sign
  Patch:	full (incremental)
  ChangeLog:	ChangeLog-6.12.60