Update of tzdata

Fix incorrect tzdb.dat by harding links...

rsync: Fix of CVE-2024-12087

CVE-2024-12087: fix path traversal vulnerability by adding a proper symlink verification and deduplication checks on a per-file-list basis...

libxml2: Fix of CVE-2025-27113

CVE-2025-27113: fix compilation of explicit child axis...

gnutls: Fix of CVE-2026-42012

CVE-2026-42012: URI subjectAltName now precludes Common Name fallback in hostname verification...

python: Fix of CVE-2026-0864

CVE-2026-0864: fix configuration injection in the ConfigParser module by normalizing all line endings CR, CRLF and LF to LF+TAB when writing multi-line values, so a carriage return in an attacker-controlled value can no longer inject unexpected keys and values into the written file...

openssl: Fix of CVE-2026-54874

CVE-2026-54874: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch, capping per-connection memory amplification...

java-1.7.0-openjdk: Fix of 6 CVEs

CVE-2026-47063: Enhance Jar handling JDK-8381049...

clamav: Fix of 6 CVEs

CVE-2026-20213: fix Aspack-triggered PE rebuild integer overflow leading to heap buffer overflow write - CVE-2026-20214: fix FSG unpacker section loop underflow leading to out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow leading to heap under-allocation and out-of-bounds...

glibc: Fix of CVE-2020-1752

CVE-2020-1752: fix use-after-free vulnerability in glob...

glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode in posix/regexec.c...

sssd: Fix of CVE-2023-3758

CVE-2023-3758: fix race condition in adgpo...

expat: Fix of CVE-2026-76957

CVE-2026-76957: fix use-after-free from calling XMLParserFree inside a custom unknown-encoding convert or release callback, by routing both through callUnknownEncodingConvert/callUnknownEncodingRelease so they are covered by the handler call depth tracking...

kernel: Fix of 2 CVEs

sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - NFSv4: include MAYWRITE in open permission mask for OTRUNC CVE-2026-64298...

curl: Fix of CVE-2026-8286

CVE-2026-8286: fix connection reuse for STARTTLS with mismatching TLS config...

glib2: Fix of CVE-2025-13601

CVE-2025-13601: error out instead of overflowing the allocation in gescapeuristring when a string needs a very large number of percent-escapes, and count unacceptable characters in an unsigned type...

libssh2: Fix of 2 CVEs

CVE-2019-3858: fix zero-byte allocation in sftppacketread - CVE-2019-3859: fix out-of-bounds reads in libssh2packetrequire...

nss: Fix of CVE-2020-25648

CVE-2020-25648: fix DoS in case of receiving multiple CCS messages - extended tests...

libxml2: Fix of CVE-2025-6021

CVE-2025-6021: fix integer overflows in buffer size calculations...

httpd: Fix of 2 CVEs

CVE-2024-47252: escape characters are now properly handled in modssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to mitigate HTTP desynchronisation attack...

squid: Fix of CVE-2025-54574

CVE-2025-54574: fix buffer overflow in URN handling...

dmidecode: Fix of CVE-2023-30630

CVE-2023-30630: prevent --dump-bin from overwriting local files to address privilege escalation vulnerability...

python: Fix of CVE-2026-9669

CVE-2026-9669: fix a stack buffer overflow in the bz2 module when a BZ2Decompressor object is reused after a decompression error; the decompressor now becomes unusable once libbz2 reports an error, instead of resuming from an invalid internal state...

bind: Fix of 2 CVEs

CVE-2026-13321: Reject NSEC records whose next owner name points outside the signer's zone, which let a signed zone forge proofs of non-existence for other zones - CVE-2026-11622: Reference count the cache rdataset headers so a superseded generation is freed as soon as nothing holds it, instead...

kernel: Fix of 56 CVEs

usb: free iso schedules on failed submit CVE-2026-64348 - udf: validate VAT header length against the VAT inode size CVE-2026-64323 - USB: idmouse: fix use-after-free on disconnect race CVE-2026-64344 - USB: ldusb: fix use-after-free on disconnect race CVE-2026-64343 - USB: iowarrior: fix...

nginx: Fix of CVE-2026-1642

CVE-2026-1642: detect premature plain text response from SSL backend...

libxml2: Fix of 2 CVEs

CVE-2026-86143: reject buffer lengths at or above INTMAX before calling the output write callback to prevent an integer overflow - CVE-2026-86144: propagate parseFlags in xmlXIncludeProcess and xmlXIncludeProcessTree so parser flags such as XMLPARSENONET are honoured...

mysql: Fix of 3 CVEs

CVE-2017-3636: mysqlaccess no longer loads its configuration file from the current directory BUG25043674 - CVE-2017-3651: mysql client escapes quoted database names in USE BUG25998635 - CVE-2017-10384: reject partition names whose file path exceeds FNREFLEN instead of overflowing stack buffers...

Update of cyrus-sasl

Bump up version...

java-1.7.0-openjdk: Fix of CVE-2026-47010

CVE-2026-47010: Enhance JPEG handling JDK-8374058, JDK-8388811...

nginx: Fix of 3 CVEs

CVE-2026-27651: properly clear s-passwd in mail auth http requests to fix a null pointer dereference on CRAM-MD5/APOP retry - CVE-2026-27654: validate the Destination length for Dav COPY and MOVE to prevent an integer underflow and heap buffer overwrite when alias is used - CVE-2026-27654: also...