CLSA-2026-1785886363 Fix CVE(s): CVE-2025-69534

SECURITY UPDATE: unhandled NotImplementedError denial-of-service in the html.parser module when parsing malformed markup declarations - debian/patches/CVE-2025-69534.patch: narrow the marked-section dispatch in parsehtmldeclaration in Lib/html/parser.py so only "!CDATA" is routed to...

CVE-2026-27150

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...