CVE-2026-43496 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-43496 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

AZL-66759 CVE-2025-58058 affecting package packer for versions less than 1.9.5-10

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...