Generic Kernel version-release: kernel-6.6.137.1-2
Add extra macros parameter to PackageBuild.yml
Add ignition to SPECS/SPECS-EXTENDED
Add rust-afterburn to SPECS/SPECS-EXTENDED
Build Wireshark package with Lua support
Cleanup unwanted files for coreos-init
Enable CONFIG_IKCONFIG_PROC on arm64 kernel
Fix c-ares ptest
Fix check before copying cfg.SrpmsDir
Fix IC golden container pip install failure under CFSClean network isolation
Fix python-google-auth-oauthlib ptest
Fix python-pytest-xdist ptest
Fix qemu-guest-agent startup failure by replacing --blacklist with --block-rpcs
Fix shim update sbat csv to match architecture
Fix systemd pcrlock failure on Hyper-V VMs with vTPM
Improve Live Migration support in QEMU
Patch avahi for CVE-2026-34933
Patch binutils for CVE-2025-69652, CVE-2025-69649, CVE-2025-69646, CVE-2025-69645, CVE-2025-11839, CVE-2025-1148, CVE-2025-1147, CVE-2025-69647, CVE-2026-4647
Patch clamav for CVE-2026-33056, CVE-2026-33055
patch containerd2 for CVE-2026-35469, CVE-2026-34986
Patch containerized-data-importer for CVE-2026-32288
Patch crash for CVE-2026-4647
Patch curl for CVE-2026-3784, CVE-2026-3783, CVE-2026-1965
Patch edk2 for CVE-2026-28390, CVE-2026-28389
Patch emacs for CVE-2026-6861
Patch erlang for CVE-2026-28808, CVE-2026-32147
Patch expat for CVE-2026-32778, CVE-2026-32777, CVE-2026-32776
Patch fluent-bit for CVE-2025-63652 and CVE-2025-63657
Patch frr for CVE-2026-28532, CVE-2026-5107
Patch gdb for CVE-2026-4647
Patch gdk-pixbuf2 for CVE-2026-5201
Patch gh for CVE-2026-32288, CVE-2026-5160
Patch haproxy for CVE-2026-33555
Patch ignition-flatcar for CVE-2026-27141
Patch jq for CVE-2026-40164, CVE-2026-39979, CVE-2026-39956, CVE-2026-33948, CVE-2026-33947, CVE-2026-32316
Patch keras for CVE-2026-1669
Patch kubernetes for CVE-2026-35469
Patch lcms2 for CVE-2026-41254
Patch libarchive for CVE-2026-5121, CVE-2026-4426, CVE-2026-4424
Patch libcap for CVE-2026-4878
Patch libexif for CVE-2026-40386, CVE-2026-40385
Patch libgcrypt for CVE-2026-41989
Patch libsoup for CVE-2026-2436
Patch libssh for CVE-2026-0967, CVE-2026-0966, CVE-2026-0965, CVE-2026-0964
Patch libssh2 for CVE-2026-7598
Patch libtiff for CVE-2026-4775
Patch mesa for CVE-2026-40393
Patch moby-containerd-cc for CVE-2026-39882
Patch moby-engine for CVE-2026-32288, CVE-2026-39882
Patch nodejs for CVE-2026-21716, CVE-2026-21715, CVE-2026-21714, CVE-2026-21713, CVE-2026-21710
Patch nodejs24 for CVE-2026-33672, CVE-2026-33671, CVE-2026-21710, CVE-2026-21637, CVE-2026-21717, CVE-2026-21713, CVE-2026-21714, CVE-2026-21712, CVE-2026-21716, CVE-2026-21715
Patch ntfs-3g for CVE-2026-40706
Patch openssh for CVE-2026-35414, CVE-2026-35388, CVE-2026-35386, CVE-2026-35385
Patch openssl for ....
Patch perl-XML-Parser for CVE-2006-10003, CVE-2006-10002
Patch poetry for CVE-2026-34591
Patch protobuf for CVE-2026-6409
Patch python-lxml for CVE-2026-41066
Patch python-mako for CVE-2026-41205
Patch python-wheel for CVE-2026-24049
Patch pytorch for CVE-2026-34446, CVE-2026-34445
Patch rpm-ostree for CVE-2026-33056, CVE-2026-33055
Patch ruby for CVE-2026-27820
Patch rubygem-faraday for CVE-2026-25765
Patch rubygem-rdiscount for CVE-2026-35201
Patch rust for CVE-2026-2006, CVE-2026-33056, CVE-2026-33055, CVE-2026-34743
Patch sed for CVE-2026-5958
Patch skopeo for CVE-2026-32288
Patch sleuthkit for CVE-2026-40026, CVE-2026-40025, CVE-2026-40024
Patch sqlite for CVE-2025-70873
Patch sudo for CVE-2026-35535
Patch systemd-bootstrap for CVE-2026-29111
Patch telegraf for CVE-2026-33216, CVE-2026-29785 CVE-2026-5160
Patch util-linux for CVE-2026-3184, CVE-2026-27456
Patch vim for CVE-2026-34714, CVE-2026-34982, CVE-2026-35177, CVE-2026-39881, CVE-2026-41411
Patch xorg-x11-server-Xwayland for CVE-2026-34003, CVE-2026-34001, CVE-2026-33999
Patch xz for CVE-2026-34743
Update kernel-uvm-micro config to be able to start kata pod
Upgrade buildah to 1.43.1
upgrade clamav to 1.5.2
Upgrade cloud-hypervisor to v51.1.56
Upgrade containerd2 version to 2.1.6
Upgrade cups to 2.4.18 for CVE-2026-39316, CVE-2026-39314, CVE-2026-34979, CVE-2026-34980 and to fix cupsd crash if user does not exist.
Upgrade erlang to 26.2.5.20 for CVE-2026-28808 and CVE-2026-32147
Upgrade freeipmi to 1.6.17 for CVE-2026-33554
Upgrade golang to 1.26.2-1 and 1.25.9-1
Upgrade irqbalance to 1.9.5 and patch for ENOSPC handling
Upgrade kernel to 6.6.137.1
Upgrade kernel version-release: kernel-6.6.137.1-2
Upgrade kernel-mshv to 6.6.135.mshv2
Upgrade kernel-uvm to 6.6.130.mshv1
Upgrade libpng to 1.6.57 for CVE-2026-34757
Upgrade mysql to 8.0.46
Upgrade python-ecdsa to 0.19.2 for CVE-2026-33936
Upgrade rubygem-addressable to 2.9.0 for CVE-2026-35611
Upgrade vim to 9.2.0323 for CVE-2026-34714, CVE-2026-34982, CVE-2026-35177, CVE-2026-39881, CVE-2026-41411
Note
On the next monthly update (the June Update) the nodejs package will automatically redirect to nodejs24. nodejs20 is End of Life and no longer supported.