.. SPDX-FileCopyrightText: 2021-2026 Univention GmbH
..
.. SPDX-License-Identifier: AGPL-3.0-only

.. _relnotes-changelog:

#########################################################
Changelog for Univention Corporate Server (UCS) |release|
#########################################################

.. _changelog-general:

*******
General
*******

.. _security:

* |UCSUCS| |release| includes all security updates issued for UCS 5.2-6:

  * :program:`aom` (:uv:cve:`2026-56208`, :uv:cve:`2026-56209`,
    :uv:cve:`2026-56210`, :uv:cve:`2026-56211`) (:uv:bug:`59908`)

  * :program:`apache2` (:uv:cve:`2026-29167`, :uv:cve:`2026-29170`,
    :uv:cve:`2026-34355`, :uv:cve:`2026-34356`, :uv:cve:`2026-42535`,
    :uv:cve:`2026-42536`, :uv:cve:`2026-43951`, :uv:cve:`2026-44119`,
    :uv:cve:`2026-44185`, :uv:cve:`2026-44186`, :uv:cve:`2026-44631`,
    :uv:cve:`2026-48913`, :uv:cve:`2026-49975`) (:uv:bug:`59500`,
    :uv:bug:`59618`)

  * :program:`apr-util` (:uv:cve:`2025-49506`, :uv:cve:`2026-32327`,
    :uv:cve:`2026-34191`, :uv:cve:`2026-34501`, :uv:cve:`2026-34502`)
    (:uv:bug:`59749`)

  * :program:`bind9` (:uv:cve:`2026-10723`, :uv:cve:`2026-10822`,
    :uv:cve:`2026-11331`, :uv:cve:`2026-11605`, :uv:cve:`2026-11622`,
    :uv:cve:`2026-11721`, :uv:cve:`2026-12617`, :uv:cve:`2026-13204`,
    :uv:cve:`2026-13321`) (:uv:bug:`59712`)

  * :program:`ceph` (:uv:cve:`2024-31884`, :uv:cve:`2024-47866`,
    :uv:cve:`2025-52555`) (:uv:bug:`59498`)

  * :program:`curl` (:uv:cve:`2025-10148`, :uv:cve:`2025-14524`,
    :uv:cve:`2025-14819`, :uv:cve:`2026-3783`, :uv:cve:`2026-3784`,
    :uv:cve:`2026-5773`, :uv:cve:`2026-7168`) (:uv:bug:`59615`)

  * :program:`expat` (:uv:cve:`2026-50219`, :uv:cve:`2026-56131`,
    :uv:cve:`2026-56403`, :uv:cve:`2026-56404`, :uv:cve:`2026-56405`,
    :uv:cve:`2026-56406`, :uv:cve:`2026-56407`, :uv:cve:`2026-56408`,
    :uv:cve:`2026-56409`, :uv:cve:`2026-56410`, :uv:cve:`2026-56411`,
    :uv:cve:`2026-56412`, :uv:cve:`2026-72522`, :uv:cve:`2026-76957`)
    (:uv:bug:`59911`)

  * :program:`firefox-esr` (:uv:cve:`2026-12289`,
    :uv:cve:`2026-12290`, :uv:cve:`2026-12291`, :uv:cve:`2026-12292`,
    :uv:cve:`2026-12294`, :uv:cve:`2026-12295`, :uv:cve:`2026-12296`,
    :uv:cve:`2026-12297`, :uv:cve:`2026-12298`, :uv:cve:`2026-12299`,
    :uv:cve:`2026-12302`, :uv:cve:`2026-12304`, :uv:cve:`2026-12305`,
    :uv:cve:`2026-12306`, :uv:cve:`2026-12307`, :uv:cve:`2026-12308`,
    :uv:cve:`2026-12309`, :uv:cve:`2026-12310`, :uv:cve:`2026-12311`,
    :uv:cve:`2026-12312`, :uv:cve:`2026-12313`, :uv:cve:`2026-12314`,
    :uv:cve:`2026-12315`, :uv:cve:`2026-12324`, :uv:cve:`2026-12325`,
    :uv:cve:`2026-12327`, :uv:cve:`2026-12328`, :uv:cve:`2026-12329`,
    :uv:cve:`2026-12330`, :uv:cve:`2026-15718`, :uv:cve:`2026-15719`,
    :uv:cve:`2026-16349`, :uv:cve:`2026-16350`, :uv:cve:`2026-16351`,
    :uv:cve:`2026-16352`, :uv:cve:`2026-16353`, :uv:cve:`2026-16354`,
    :uv:cve:`2026-16355`, :uv:cve:`2026-16356`, :uv:cve:`2026-16357`,
    :uv:cve:`2026-16358`, :uv:cve:`2026-16359`, :uv:cve:`2026-16360`,
    :uv:cve:`2026-16361`, :uv:cve:`2026-16362`, :uv:cve:`2026-16363`,
    :uv:cve:`2026-16365`, :uv:cve:`2026-16368`, :uv:cve:`2026-16369`,
    :uv:cve:`2026-16371`, :uv:cve:`2026-16374`, :uv:cve:`2026-16375`,
    :uv:cve:`2026-16377`, :uv:cve:`2026-16379`, :uv:cve:`2026-16381`,
    :uv:cve:`2026-16383`, :uv:cve:`2026-16387`, :uv:cve:`2026-16390`,
    :uv:cve:`2026-16391`, :uv:cve:`2026-16396`, :uv:cve:`2026-16405`,
    :uv:cve:`2026-16412`, :uv:cve:`2026-74934`, :uv:cve:`2026-74935`,
    :uv:cve:`2026-74936`, :uv:cve:`2026-74939`, :uv:cve:`2026-74940`,
    :uv:cve:`2026-74941`, :uv:cve:`2026-74942`, :uv:cve:`2026-74943`,
    :uv:cve:`2026-74944`, :uv:cve:`2026-74945`, :uv:cve:`2026-74946`,
    :uv:cve:`2026-74948`, :uv:cve:`2026-74949`, :uv:cve:`2026-74953`,
    :uv:cve:`2026-74957`, :uv:cve:`2026-74959`, :uv:cve:`2026-74960`,
    :uv:cve:`2026-74962`, :uv:cve:`2026-74963`, :uv:cve:`2026-74964`,
    :uv:cve:`2026-74965`, :uv:cve:`2026-74967`, :uv:cve:`2026-74969`,
    :uv:cve:`2026-74971`, :uv:cve:`2026-74972`, :uv:cve:`2026-74973`,
    :uv:cve:`2026-74974`, :uv:cve:`2026-74976`, :uv:cve:`2026-74983`,
    :uv:cve:`2026-74987`, :uv:cve:`2026-74990`, :uv:cve:`2026-75874`,
    :uv:cve:`2026-84119`, :uv:cve:`2026-84120`, :uv:cve:`2026-84121`,
    :uv:cve:`2026-84122`, :uv:cve:`2026-84124`, :uv:cve:`2026-84131`,
    :uv:cve:`2026-84143`, :uv:cve:`2026-84145`) (:uv:bug:`59529`,
    :uv:bug:`59681`, :uv:bug:`59776`, :uv:bug:`59913`)

  * :program:`giflib` (:uv:cve:`2026-23868`, :uv:cve:`2026-26740`)
    (:uv:bug:`59622`)

  * :program:`graphite2` (:uv:cve:`2026-50593`) (:uv:bug:`59610`)

  * :program:`gsasl` (:uv:cve:`2026-48829`, :uv:cve:`2026-56968`)
    (:uv:bug:`59714`)

  * :program:`hplip` (:uv:cve:`2026-8631`, :uv:cve:`2026-8632`)
    (:uv:bug:`59687`)

  * :program:`imagemagick` (:uv:cve:`2026-48733`,
    :uv:cve:`2026-48734`, :uv:cve:`2026-48994`, :uv:cve:`2026-49218`,
    :uv:cve:`2026-53460`, :uv:cve:`2026-53463`, :uv:cve:`2026-53466`,
    :uv:cve:`2026-53467`, :uv:cve:`2026-55577`, :uv:cve:`2026-55594`,
    :uv:cve:`2026-55595`, :uv:cve:`2026-55597`, :uv:cve:`2026-55628`,
    :uv:cve:`2026-56361`, :uv:cve:`2026-56363`, :uv:cve:`2026-56365`,
    :uv:cve:`2026-56366`, :uv:cve:`2026-56367`, :uv:cve:`2026-56368`,
    :uv:cve:`2026-56370`, :uv:cve:`2026-56371`, :uv:cve:`2026-56373`,
    :uv:cve:`2026-56376`, :uv:cve:`2026-56377`, :uv:cve:`2026-56378`,
    :uv:cve:`2026-61464`, :uv:cve:`2026-61465`, :uv:cve:`2026-61857`,
    :uv:cve:`2026-61858`, :uv:cve:`2026-61859`, :uv:cve:`2026-61860`,
    :uv:cve:`2026-61862`, :uv:cve:`2026-61863`, :uv:cve:`2026-61864`,
    :uv:cve:`2026-61865`, :uv:cve:`2026-61866`, :uv:cve:`2026-61868`,
    :uv:cve:`2026-61869`, :uv:cve:`2026-61870`, :uv:cve:`2026-61872`)
    (:uv:bug:`59572`, :uv:bug:`59657`, :uv:bug:`59680`)

  * :program:`libarchive` (:uv:cve:`2026-14164`, :uv:cve:`2026-15028`,
    :uv:cve:`2026-16517`) (:uv:bug:`59907`)

  * :program:`libbytes-random-secure-perl` (:uv:cve:`2026-11625`)
    (:uv:bug:`59612`)

  * :program:`libconfig-inifiles-perl` (:uv:cve:`2026-11527`)
    (:uv:bug:`59527`)

  * :program:`libdbi-perl` (:uv:cve:`2026-10879`,
    :uv:cve:`2026-14380`, :uv:cve:`2026-14739`, :uv:cve:`2026-14740`,
    :uv:cve:`2026-15043`, :uv:cve:`2026-15392`, :uv:cve:`2026-60081`,
    :uv:cve:`2026-60082`, :uv:cve:`2026-73193`, :uv:cve:`2026-73194`,
    :uv:cve:`2026-9698`) (:uv:bug:`59496`, :uv:bug:`59910`)

  * :program:`libgd2` (:uv:cve:`2026-9672`) (:uv:bug:`59747`)

  * :program:`libhtml-parser-perl` (:uv:cve:`2026-8829`)
    (:uv:bug:`59608`)

  * :program:`libhttp-daemon-perl` (:uv:cve:`2026-8450`)
    (:uv:bug:`59528`)

  * :program:`libinput` (:uv:cve:`2026-50292`) (:uv:bug:`59501`)

  * :program:`libnet-cidr-lite-perl` (:uv:cve:`2026-45190`,
    :uv:cve:`2026-45191`) (:uv:bug:`59655`)

  * :program:`libnet-dns-perl` (:uv:cve:`2026-64194`)
    (:uv:bug:`59860`)

  * :program:`libnfs` (:uv:cve:`2026-53689`) (:uv:bug:`59653`)

  * :program:`libssh2` (:uv:cve:`2025-15661`, :uv:cve:`2026-58050`,
    :uv:cve:`2026-58051`, :uv:cve:`2026-66032`, :uv:cve:`2026-66034`,
    :uv:cve:`2026-7598`) (:uv:bug:`59912`)

  * :program:`libxfont` (:uv:cve:`2026-56001`, :uv:cve:`2026-56002`,
    :uv:cve:`2026-56003`) (:uv:bug:`59654`)

  * :program:`libxml-libxml-perl` (:uv:cve:`2026-8177`)
    (:uv:bug:`59611`)

  * :program:`libxml2` (:uv:cve:`2025-49794`, :uv:cve:`2025-8732`,
    :uv:cve:`2026-0989`, :uv:cve:`2026-0990`, :uv:cve:`2026-0992`,
    :uv:cve:`2026-1757`) (:uv:bug:`59621`)

  * :program:`linux` (:uv:cve:`2023-53292`, :uv:cve:`2023-53989`,
    :uv:cve:`2023-54125`, :uv:cve:`2023-54271`, :uv:cve:`2023-54322`,
    :uv:cve:`2024-27012`, :uv:cve:`2024-36013`, :uv:cve:`2024-36922`,
    :uv:cve:`2024-53221`, :uv:cve:`2024-56657`, :uv:cve:`2025-10263`,
    :uv:cve:`2025-21739`, :uv:cve:`2025-21863`, :uv:cve:`2025-22105`,
    :uv:cve:`2025-23131`, :uv:cve:`2025-37864`, :uv:cve:`2025-38349`,
    :uv:cve:`2025-38584`, :uv:cve:`2025-38627`, :uv:cve:`2025-38710`,
    :uv:cve:`2025-39997`, :uv:cve:`2025-40196`, :uv:cve:`2025-40347`,
    :uv:cve:`2025-68201`, :uv:cve:`2025-68315`, :uv:cve:`2025-68823`,
    :uv:cve:`2026-23066`, :uv:cve:`2026-23255`, :uv:cve:`2026-23272`,
    :uv:cve:`2026-23278`, :uv:cve:`2026-23302`, :uv:cve:`2026-23310`,
    :uv:cve:`2026-23389`, :uv:cve:`2026-23399`, :uv:cve:`2026-23442`,
    :uv:cve:`2026-23444`, :uv:cve:`2026-23468`, :uv:cve:`2026-31407`,
    :uv:cve:`2026-31449`, :uv:cve:`2026-31488`, :uv:cve:`2026-31489`,
    :uv:cve:`2026-31500`, :uv:cve:`2026-31532`, :uv:cve:`2026-31576`,
    :uv:cve:`2026-31577`, :uv:cve:`2026-31578`, :uv:cve:`2026-31580`,
    :uv:cve:`2026-31581`, :uv:cve:`2026-31583`, :uv:cve:`2026-31585`,
    :uv:cve:`2026-31586`, :uv:cve:`2026-31587`, :uv:cve:`2026-31588`,
    :uv:cve:`2026-31590`, :uv:cve:`2026-31594`, :uv:cve:`2026-31595`,
    :uv:cve:`2026-31596`, :uv:cve:`2026-31597`, :uv:cve:`2026-31598`,
    :uv:cve:`2026-31599`, :uv:cve:`2026-31602`, :uv:cve:`2026-31603`,
    :uv:cve:`2026-31605`, :uv:cve:`2026-31607`, :uv:cve:`2026-31610`,
    :uv:cve:`2026-31611`, :uv:cve:`2026-31612`, :uv:cve:`2026-31613`,
    :uv:cve:`2026-31615`, :uv:cve:`2026-31616`, :uv:cve:`2026-31617`,
    :uv:cve:`2026-31618`, :uv:cve:`2026-31619`, :uv:cve:`2026-31622`,
    :uv:cve:`2026-31623`, :uv:cve:`2026-31624`, :uv:cve:`2026-31625`,
    :uv:cve:`2026-31626`, :uv:cve:`2026-31627`, :uv:cve:`2026-31629`,
    :uv:cve:`2026-31630`, :uv:cve:`2026-31637`, :uv:cve:`2026-31642`,
    :uv:cve:`2026-31673`, :uv:cve:`2026-31676`, :uv:cve:`2026-31681`,
    :uv:cve:`2026-31684`, :uv:cve:`2026-31685`, :uv:cve:`2026-31686`,
    :uv:cve:`2026-31694`, :uv:cve:`2026-31696`, :uv:cve:`2026-31697`,
    :uv:cve:`2026-31698`, :uv:cve:`2026-31699`, :uv:cve:`2026-31700`,
    :uv:cve:`2026-31701`, :uv:cve:`2026-31702`, :uv:cve:`2026-31704`,
    :uv:cve:`2026-31705`, :uv:cve:`2026-31708`, :uv:cve:`2026-31709`,
    :uv:cve:`2026-31711`, :uv:cve:`2026-31712`, :uv:cve:`2026-31715`,
    :uv:cve:`2026-31716`, :uv:cve:`2026-43052`, :uv:cve:`2026-43058`,
    :uv:cve:`2026-43064`, :uv:cve:`2026-43071`, :uv:cve:`2026-43072`,
    :uv:cve:`2026-43074`, :uv:cve:`2026-43075`, :uv:cve:`2026-43076`,
    :uv:cve:`2026-43079`, :uv:cve:`2026-43080`, :uv:cve:`2026-43085`,
    :uv:cve:`2026-43089`, :uv:cve:`2026-43093`, :uv:cve:`2026-43094`,
    :uv:cve:`2026-43098`, :uv:cve:`2026-43099`, :uv:cve:`2026-43103`,
    :uv:cve:`2026-43104`, :uv:cve:`2026-43105`, :uv:cve:`2026-43110`,
    :uv:cve:`2026-43111`, :uv:cve:`2026-43112`, :uv:cve:`2026-43113`,
    :uv:cve:`2026-43114`, :uv:cve:`2026-43116`, :uv:cve:`2026-43117`,
    :uv:cve:`2026-43216`, :uv:cve:`2026-43219`, :uv:cve:`2026-43303`,
    :uv:cve:`2026-43350`, :uv:cve:`2026-43421`, :uv:cve:`2026-43492`,
    :uv:cve:`2026-43493`, :uv:cve:`2026-43494`, :uv:cve:`2026-43495`,
    :uv:cve:`2026-43496`, :uv:cve:`2026-43497`, :uv:cve:`2026-43499`,
    :uv:cve:`2026-43501`, :uv:cve:`2026-43502`, :uv:cve:`2026-45834`,
    :uv:cve:`2026-45835`, :uv:cve:`2026-45836`, :uv:cve:`2026-45838`,
    :uv:cve:`2026-45839`, :uv:cve:`2026-45840`, :uv:cve:`2026-45841`,
    :uv:cve:`2026-45842`, :uv:cve:`2026-45843`, :uv:cve:`2026-45844`,
    :uv:cve:`2026-45846`, :uv:cve:`2026-45850`, :uv:cve:`2026-45930`,
    :uv:cve:`2026-45986`, :uv:cve:`2026-45987`, :uv:cve:`2026-45991`,
    :uv:cve:`2026-45994`, :uv:cve:`2026-45996`, :uv:cve:`2026-45997`,
    :uv:cve:`2026-45999`, :uv:cve:`2026-46002`, :uv:cve:`2026-46003`,
    :uv:cve:`2026-46004`, :uv:cve:`2026-46005`, :uv:cve:`2026-46006`,
    :uv:cve:`2026-46009`, :uv:cve:`2026-46015`, :uv:cve:`2026-46018`,
    :uv:cve:`2026-46019`, :uv:cve:`2026-46021`, :uv:cve:`2026-46022`,
    :uv:cve:`2026-46023`, :uv:cve:`2026-46024`, :uv:cve:`2026-46026`,
    :uv:cve:`2026-46027`, :uv:cve:`2026-46031`, :uv:cve:`2026-46033`,
    :uv:cve:`2026-46037`, :uv:cve:`2026-46038`, :uv:cve:`2026-46040`,
    :uv:cve:`2026-46043`, :uv:cve:`2026-46044`, :uv:cve:`2026-46046`,
    :uv:cve:`2026-46047`, :uv:cve:`2026-46049`, :uv:cve:`2026-46050`,
    :uv:cve:`2026-46051`, :uv:cve:`2026-46052`, :uv:cve:`2026-46053`,
    :uv:cve:`2026-46056`, :uv:cve:`2026-46058`, :uv:cve:`2026-46062`,
    :uv:cve:`2026-46064`, :uv:cve:`2026-46065`, :uv:cve:`2026-46069`,
    :uv:cve:`2026-46070`, :uv:cve:`2026-46072`, :uv:cve:`2026-46075`,
    :uv:cve:`2026-46077`, :uv:cve:`2026-46078`, :uv:cve:`2026-46079`,
    :uv:cve:`2026-46080`, :uv:cve:`2026-46082`, :uv:cve:`2026-46083`,
    :uv:cve:`2026-46086`, :uv:cve:`2026-46088`, :uv:cve:`2026-46091`,
    :uv:cve:`2026-46098`, :uv:cve:`2026-46099`, :uv:cve:`2026-46101`,
    :uv:cve:`2026-46102`, :uv:cve:`2026-46103`, :uv:cve:`2026-46107`,
    :uv:cve:`2026-46108`, :uv:cve:`2026-46109`, :uv:cve:`2026-46110`,
    :uv:cve:`2026-46112`, :uv:cve:`2026-46113`, :uv:cve:`2026-46116`,
    :uv:cve:`2026-46119`, :uv:cve:`2026-46120`, :uv:cve:`2026-46122`,
    :uv:cve:`2026-46123`, :uv:cve:`2026-46124`, :uv:cve:`2026-46125`,
    :uv:cve:`2026-46127`, :uv:cve:`2026-46128`, :uv:cve:`2026-46129`,
    :uv:cve:`2026-46132`, :uv:cve:`2026-46133`, :uv:cve:`2026-46135`,
    :uv:cve:`2026-46136`, :uv:cve:`2026-46137`, :uv:cve:`2026-46143`,
    :uv:cve:`2026-46146`, :uv:cve:`2026-46149`, :uv:cve:`2026-46150`,
    :uv:cve:`2026-46151`, :uv:cve:`2026-46159`, :uv:cve:`2026-46160`,
    :uv:cve:`2026-46161`, :uv:cve:`2026-46163`, :uv:cve:`2026-46164`,
    :uv:cve:`2026-46165`, :uv:cve:`2026-46167`, :uv:cve:`2026-46168`,
    :uv:cve:`2026-46169`, :uv:cve:`2026-46172`, :uv:cve:`2026-46173`,
    :uv:cve:`2026-46177`, :uv:cve:`2026-46178`, :uv:cve:`2026-46179`,
    :uv:cve:`2026-46180`, :uv:cve:`2026-46184`, :uv:cve:`2026-46185`,
    :uv:cve:`2026-46186`, :uv:cve:`2026-46187`, :uv:cve:`2026-46189`,
    :uv:cve:`2026-46190`, :uv:cve:`2026-46191`, :uv:cve:`2026-46193`,
    :uv:cve:`2026-46195`, :uv:cve:`2026-46196`, :uv:cve:`2026-46197`,
    :uv:cve:`2026-46198`, :uv:cve:`2026-46199`, :uv:cve:`2026-46205`,
    :uv:cve:`2026-46206`, :uv:cve:`2026-46208`, :uv:cve:`2026-46209`,
    :uv:cve:`2026-46212`, :uv:cve:`2026-46214`, :uv:cve:`2026-46218`,
    :uv:cve:`2026-46220`, :uv:cve:`2026-46227`, :uv:cve:`2026-46230`,
    :uv:cve:`2026-46231`, :uv:cve:`2026-46233`, :uv:cve:`2026-46234`,
    :uv:cve:`2026-46235`, :uv:cve:`2026-46236`, :uv:cve:`2026-46238`,
    :uv:cve:`2026-46242`, :uv:cve:`2026-46273`, :uv:cve:`2026-46275`,
    :uv:cve:`2026-46276`, :uv:cve:`2026-46280`, :uv:cve:`2026-46285`,
    :uv:cve:`2026-46291`, :uv:cve:`2026-46292`, :uv:cve:`2026-46294`,
    :uv:cve:`2026-46296`, :uv:cve:`2026-46299`, :uv:cve:`2026-46301`,
    :uv:cve:`2026-46303`, :uv:cve:`2026-46304`, :uv:cve:`2026-46306`,
    :uv:cve:`2026-46307`, :uv:cve:`2026-46314`, :uv:cve:`2026-46319`,
    :uv:cve:`2026-46320`, :uv:cve:`2026-46321`, :uv:cve:`2026-46322`,
    :uv:cve:`2026-46323`, :uv:cve:`2026-46331`, :uv:cve:`2026-52909`,
    :uv:cve:`2026-52910`, :uv:cve:`2026-52911`, :uv:cve:`2026-52912`,
    :uv:cve:`2026-52913`, :uv:cve:`2026-52914`, :uv:cve:`2026-52915`,
    :uv:cve:`2026-52916`, :uv:cve:`2026-52917`, :uv:cve:`2026-52918`,
    :uv:cve:`2026-52919`, :uv:cve:`2026-52920`, :uv:cve:`2026-52921`,
    :uv:cve:`2026-52922`, :uv:cve:`2026-52923`, :uv:cve:`2026-52924`,
    :uv:cve:`2026-52925`, :uv:cve:`2026-52926`, :uv:cve:`2026-52927`,
    :uv:cve:`2026-52928`, :uv:cve:`2026-52929`, :uv:cve:`2026-52930`,
    :uv:cve:`2026-52931`, :uv:cve:`2026-52933`, :uv:cve:`2026-52934`,
    :uv:cve:`2026-52935`, :uv:cve:`2026-52939`, :uv:cve:`2026-52941`,
    :uv:cve:`2026-52942`, :uv:cve:`2026-52943`, :uv:cve:`2026-52946`,
    :uv:cve:`2026-52947`, :uv:cve:`2026-52948`, :uv:cve:`2026-52954`,
    :uv:cve:`2026-52955`, :uv:cve:`2026-52957`, :uv:cve:`2026-52958`,
    :uv:cve:`2026-52962`, :uv:cve:`2026-52963`, :uv:cve:`2026-52967`,
    :uv:cve:`2026-52968`, :uv:cve:`2026-52969`, :uv:cve:`2026-52970`,
    :uv:cve:`2026-52972`, :uv:cve:`2026-52974`, :uv:cve:`2026-52975`,
    :uv:cve:`2026-52977`, :uv:cve:`2026-52981`, :uv:cve:`2026-52982`,
    :uv:cve:`2026-52984`, :uv:cve:`2026-52985`, :uv:cve:`2026-52986`,
    :uv:cve:`2026-52989`, :uv:cve:`2026-52992`, :uv:cve:`2026-52993`,
    :uv:cve:`2026-52995`, :uv:cve:`2026-52998`, :uv:cve:`2026-52999`,
    :uv:cve:`2026-53001`, :uv:cve:`2026-53002`, :uv:cve:`2026-53003`,
    :uv:cve:`2026-53004`, :uv:cve:`2026-53006`, :uv:cve:`2026-53011`,
    :uv:cve:`2026-53012`, :uv:cve:`2026-53016`, :uv:cve:`2026-53021`,
    :uv:cve:`2026-53022`, :uv:cve:`2026-53023`, :uv:cve:`2026-53033`,
    :uv:cve:`2026-53034`, :uv:cve:`2026-53035`, :uv:cve:`2026-53036`,
    :uv:cve:`2026-53037`, :uv:cve:`2026-53039`, :uv:cve:`2026-53040`,
    :uv:cve:`2026-53041`, :uv:cve:`2026-53043`, :uv:cve:`2026-53045`,
    :uv:cve:`2026-53046`, :uv:cve:`2026-53047`, :uv:cve:`2026-53048`,
    :uv:cve:`2026-53049`, :uv:cve:`2026-53050`, :uv:cve:`2026-53052`,
    :uv:cve:`2026-53056`, :uv:cve:`2026-53059`, :uv:cve:`2026-53060`,
    :uv:cve:`2026-53061`, :uv:cve:`2026-53062`, :uv:cve:`2026-53063`,
    :uv:cve:`2026-53064`, :uv:cve:`2026-53065`, :uv:cve:`2026-53066`,
    :uv:cve:`2026-53068`, :uv:cve:`2026-53069`, :uv:cve:`2026-53071`,
    :uv:cve:`2026-53072`, :uv:cve:`2026-53073`, :uv:cve:`2026-53074`,
    :uv:cve:`2026-53075`, :uv:cve:`2026-53077`, :uv:cve:`2026-53080`,
    :uv:cve:`2026-53082`, :uv:cve:`2026-53086`, :uv:cve:`2026-53088`,
    :uv:cve:`2026-53093`, :uv:cve:`2026-53096`, :uv:cve:`2026-53111`,
    :uv:cve:`2026-53112`, :uv:cve:`2026-53128`, :uv:cve:`2026-53130`,
    :uv:cve:`2026-53131`, :uv:cve:`2026-53133`, :uv:cve:`2026-53134`,
    :uv:cve:`2026-53135`, :uv:cve:`2026-53136`, :uv:cve:`2026-53137`,
    :uv:cve:`2026-53138`, :uv:cve:`2026-53139`, :uv:cve:`2026-53146`,
    :uv:cve:`2026-53147`, :uv:cve:`2026-53148`, :uv:cve:`2026-53149`,
    :uv:cve:`2026-53150`, :uv:cve:`2026-53157`, :uv:cve:`2026-53158`,
    :uv:cve:`2026-53159`, :uv:cve:`2026-53160`, :uv:cve:`2026-53161`,
    :uv:cve:`2026-53163`, :uv:cve:`2026-53167`, :uv:cve:`2026-53168`,
    :uv:cve:`2026-53176`, :uv:cve:`2026-53177`, :uv:cve:`2026-53181`,
    :uv:cve:`2026-53182`, :uv:cve:`2026-53183`, :uv:cve:`2026-53184`,
    :uv:cve:`2026-53186`, :uv:cve:`2026-53189`, :uv:cve:`2026-53194`,
    :uv:cve:`2026-53195`, :uv:cve:`2026-53196`, :uv:cve:`2026-53198`,
    :uv:cve:`2026-53199`, :uv:cve:`2026-53207`, :uv:cve:`2026-53208`,
    :uv:cve:`2026-53209`, :uv:cve:`2026-53212`, :uv:cve:`2026-53213`,
    :uv:cve:`2026-53215`, :uv:cve:`2026-53216`, :uv:cve:`2026-53217`,
    :uv:cve:`2026-53218`, :uv:cve:`2026-53219`, :uv:cve:`2026-53221`,
    :uv:cve:`2026-53223`, :uv:cve:`2026-53225`, :uv:cve:`2026-53227`,
    :uv:cve:`2026-53228`, :uv:cve:`2026-53236`, :uv:cve:`2026-53238`,
    :uv:cve:`2026-53239`, :uv:cve:`2026-53242`, :uv:cve:`2026-53245`,
    :uv:cve:`2026-53249`, :uv:cve:`2026-53252`, :uv:cve:`2026-53253`,
    :uv:cve:`2026-53254`, :uv:cve:`2026-53255`, :uv:cve:`2026-53256`,
    :uv:cve:`2026-53263`, :uv:cve:`2026-53264`, :uv:cve:`2026-53265`,
    :uv:cve:`2026-53266`, :uv:cve:`2026-53268`, :uv:cve:`2026-53269`,
    :uv:cve:`2026-53270`, :uv:cve:`2026-53273`, :uv:cve:`2026-53274`,
    :uv:cve:`2026-53275`, :uv:cve:`2026-53279`, :uv:cve:`2026-53287`,
    :uv:cve:`2026-53289`, :uv:cve:`2026-53291`, :uv:cve:`2026-53294`,
    :uv:cve:`2026-53295`, :uv:cve:`2026-53296`, :uv:cve:`2026-53303`,
    :uv:cve:`2026-53304`, :uv:cve:`2026-53306`, :uv:cve:`2026-53309`,
    :uv:cve:`2026-53314`, :uv:cve:`2026-53320`, :uv:cve:`2026-53325`,
    :uv:cve:`2026-53329`, :uv:cve:`2026-53331`, :uv:cve:`2026-53332`,
    :uv:cve:`2026-53337`, :uv:cve:`2026-53339`, :uv:cve:`2026-53343`,
    :uv:cve:`2026-53349`, :uv:cve:`2026-53350`, :uv:cve:`2026-53352`,
    :uv:cve:`2026-53354`, :uv:cve:`2026-53355`, :uv:cve:`2026-53356`,
    :uv:cve:`2026-53359`, :uv:cve:`2026-53362`, :uv:cve:`2026-53366`,
    :uv:cve:`2026-53392`, :uv:cve:`2026-53393`, :uv:cve:`2026-53399`,
    :uv:cve:`2026-53400`, :uv:cve:`2026-53402`, :uv:cve:`2026-63797`,
    :uv:cve:`2026-63806`, :uv:cve:`2026-63810`, :uv:cve:`2026-63815`,
    :uv:cve:`2026-63818`, :uv:cve:`2026-63829`, :uv:cve:`2026-64187`,
    :uv:cve:`2026-64189`, :uv:cve:`2026-64206`, :uv:cve:`2026-64248`,
    :uv:cve:`2026-64250`, :uv:cve:`2026-64266`, :uv:cve:`2026-64268`,
    :uv:cve:`2026-64269`, :uv:cve:`2026-64271`, :uv:cve:`2026-64273`,
    :uv:cve:`2026-64274`, :uv:cve:`2026-64275`, :uv:cve:`2026-64276`,
    :uv:cve:`2026-64277`, :uv:cve:`2026-64279`, :uv:cve:`2026-64296`,
    :uv:cve:`2026-64297`, :uv:cve:`2026-64298`, :uv:cve:`2026-64299`,
    :uv:cve:`2026-64301`, :uv:cve:`2026-64303`, :uv:cve:`2026-64304`,
    :uv:cve:`2026-64306`, :uv:cve:`2026-64312`, :uv:cve:`2026-64313`,
    :uv:cve:`2026-64315`, :uv:cve:`2026-64316`, :uv:cve:`2026-64317`,
    :uv:cve:`2026-64318`, :uv:cve:`2026-64322`, :uv:cve:`2026-64323`,
    :uv:cve:`2026-64324`, :uv:cve:`2026-64329`, :uv:cve:`2026-64330`,
    :uv:cve:`2026-64331`, :uv:cve:`2026-64332`, :uv:cve:`2026-64333`,
    :uv:cve:`2026-64334`, :uv:cve:`2026-64335`, :uv:cve:`2026-64336`,
    :uv:cve:`2026-64337`, :uv:cve:`2026-64338`, :uv:cve:`2026-64340`,
    :uv:cve:`2026-64342`, :uv:cve:`2026-64343`, :uv:cve:`2026-64344`,
    :uv:cve:`2026-64346`, :uv:cve:`2026-64347`, :uv:cve:`2026-64350`,
    :uv:cve:`2026-64351`, :uv:cve:`2026-64352`, :uv:cve:`2026-64355`,
    :uv:cve:`2026-64359`, :uv:cve:`2026-64360`, :uv:cve:`2026-64361`,
    :uv:cve:`2026-64362`, :uv:cve:`2026-64363`, :uv:cve:`2026-64364`,
    :uv:cve:`2026-64365`, :uv:cve:`2026-64370`, :uv:cve:`2026-64371`,
    :uv:cve:`2026-64372`, :uv:cve:`2026-64373`, :uv:cve:`2026-64374`,
    :uv:cve:`2026-64375`, :uv:cve:`2026-64376`, :uv:cve:`2026-64378`,
    :uv:cve:`2026-64379`, :uv:cve:`2026-64380`, :uv:cve:`2026-64381`,
    :uv:cve:`2026-64390`, :uv:cve:`2026-64393`, :uv:cve:`2026-64394`,
    :uv:cve:`2026-64395`, :uv:cve:`2026-64396`, :uv:cve:`2026-64397`,
    :uv:cve:`2026-64398`, :uv:cve:`2026-64399`, :uv:cve:`2026-64401`,
    :uv:cve:`2026-64403`, :uv:cve:`2026-64406`, :uv:cve:`2026-64408`,
    :uv:cve:`2026-64409`, :uv:cve:`2026-64411`, :uv:cve:`2026-64412`,
    :uv:cve:`2026-64413`, :uv:cve:`2026-64417`, :uv:cve:`2026-64419`,
    :uv:cve:`2026-64420`, :uv:cve:`2026-64422`, :uv:cve:`2026-64423`,
    :uv:cve:`2026-64425`, :uv:cve:`2026-64428`, :uv:cve:`2026-64429`,
    :uv:cve:`2026-64430`, :uv:cve:`2026-64432`, :uv:cve:`2026-64435`,
    :uv:cve:`2026-64436`, :uv:cve:`2026-64437`, :uv:cve:`2026-64438`,
    :uv:cve:`2026-64440`, :uv:cve:`2026-64441`, :uv:cve:`2026-64442`,
    :uv:cve:`2026-64443`, :uv:cve:`2026-64444`, :uv:cve:`2026-64445`,
    :uv:cve:`2026-64446`, :uv:cve:`2026-64448`, :uv:cve:`2026-64449`,
    :uv:cve:`2026-64450`, :uv:cve:`2026-64452`, :uv:cve:`2026-64454`,
    :uv:cve:`2026-64455`, :uv:cve:`2026-64456`, :uv:cve:`2026-64458`,
    :uv:cve:`2026-64461`, :uv:cve:`2026-64462`, :uv:cve:`2026-64465`,
    :uv:cve:`2026-64468`, :uv:cve:`2026-64469`, :uv:cve:`2026-64470`,
    :uv:cve:`2026-64471`, :uv:cve:`2026-64472`, :uv:cve:`2026-64475`,
    :uv:cve:`2026-64476`, :uv:cve:`2026-64478`, :uv:cve:`2026-64480`,
    :uv:cve:`2026-64482`, :uv:cve:`2026-64483`, :uv:cve:`2026-64484`,
    :uv:cve:`2026-64486`, :uv:cve:`2026-64487`, :uv:cve:`2026-64488`,
    :uv:cve:`2026-64489`, :uv:cve:`2026-64494`, :uv:cve:`2026-64495`,
    :uv:cve:`2026-64496`, :uv:cve:`2026-64497`, :uv:cve:`2026-64500`,
    :uv:cve:`2026-64503`, :uv:cve:`2026-64504`, :uv:cve:`2026-64505`,
    :uv:cve:`2026-64510`, :uv:cve:`2026-64512`, :uv:cve:`2026-64514`,
    :uv:cve:`2026-64530`, :uv:cve:`2026-64531`, :uv:cve:`2026-64532`,
    :uv:cve:`2026-64533`, :uv:cve:`2026-64534`, :uv:cve:`2026-64535`,
    :uv:cve:`2026-64536`, :uv:cve:`2026-64537`, :uv:cve:`2026-64538`,
    :uv:cve:`2026-64539`, :uv:cve:`2026-64540`, :uv:cve:`2026-64541`,
    :uv:cve:`2026-64544`, :uv:cve:`2026-64545`, :uv:cve:`2026-64546`,
    :uv:cve:`2026-64547`, :uv:cve:`2026-64548`, :uv:cve:`2026-64549`,
    :uv:cve:`2026-64550`, :uv:cve:`2026-64551`, :uv:cve:`2026-64552`,
    :uv:cve:`2026-64553`, :uv:cve:`2026-64554`, :uv:cve:`2026-64557`,
    :uv:cve:`2026-64560`, :uv:cve:`2026-64585`, :uv:cve:`2026-64593`,
    :uv:cve:`2026-64594`, :uv:cve:`2026-64599`, :uv:cve:`2026-64600`,
    :uv:cve:`2026-64602`, :uv:cve:`2026-64604`) (:uv:bug:`59588`,
    :uv:bug:`59662`, :uv:bug:`59713`)

  * :program:`linux-signed-amd64` (:uv:cve:`2023-53292`,
    :uv:cve:`2023-53989`, :uv:cve:`2023-54125`, :uv:cve:`2023-54271`,
    :uv:cve:`2023-54322`, :uv:cve:`2024-27012`, :uv:cve:`2024-36013`,
    :uv:cve:`2024-36922`, :uv:cve:`2024-53221`, :uv:cve:`2024-56657`,
    :uv:cve:`2025-10263`, :uv:cve:`2025-21739`, :uv:cve:`2025-21863`,
    :uv:cve:`2025-22105`, :uv:cve:`2025-23131`, :uv:cve:`2025-37864`,
    :uv:cve:`2025-38349`, :uv:cve:`2025-38584`, :uv:cve:`2025-38627`,
    :uv:cve:`2025-38710`, :uv:cve:`2025-39997`, :uv:cve:`2025-40196`,
    :uv:cve:`2025-40347`, :uv:cve:`2025-68201`, :uv:cve:`2025-68315`,
    :uv:cve:`2025-68823`, :uv:cve:`2026-23066`, :uv:cve:`2026-23255`,
    :uv:cve:`2026-23272`, :uv:cve:`2026-23278`, :uv:cve:`2026-23302`,
    :uv:cve:`2026-23310`, :uv:cve:`2026-23389`, :uv:cve:`2026-23399`,
    :uv:cve:`2026-23442`, :uv:cve:`2026-23444`, :uv:cve:`2026-23468`,
    :uv:cve:`2026-31407`, :uv:cve:`2026-31449`, :uv:cve:`2026-31488`,
    :uv:cve:`2026-31489`, :uv:cve:`2026-31500`, :uv:cve:`2026-31532`,
    :uv:cve:`2026-31576`, :uv:cve:`2026-31577`, :uv:cve:`2026-31578`,
    :uv:cve:`2026-31580`, :uv:cve:`2026-31581`, :uv:cve:`2026-31583`,
    :uv:cve:`2026-31585`, :uv:cve:`2026-31586`, :uv:cve:`2026-31587`,
    :uv:cve:`2026-31588`, :uv:cve:`2026-31590`, :uv:cve:`2026-31594`,
    :uv:cve:`2026-31595`, :uv:cve:`2026-31596`, :uv:cve:`2026-31597`,
    :uv:cve:`2026-31598`, :uv:cve:`2026-31599`, :uv:cve:`2026-31602`,
    :uv:cve:`2026-31603`, :uv:cve:`2026-31605`, :uv:cve:`2026-31607`,
    :uv:cve:`2026-31610`, :uv:cve:`2026-31611`, :uv:cve:`2026-31612`,
    :uv:cve:`2026-31613`, :uv:cve:`2026-31615`, :uv:cve:`2026-31616`,
    :uv:cve:`2026-31617`, :uv:cve:`2026-31618`, :uv:cve:`2026-31619`,
    :uv:cve:`2026-31622`, :uv:cve:`2026-31623`, :uv:cve:`2026-31624`,
    :uv:cve:`2026-31625`, :uv:cve:`2026-31626`, :uv:cve:`2026-31627`,
    :uv:cve:`2026-31629`, :uv:cve:`2026-31630`, :uv:cve:`2026-31637`,
    :uv:cve:`2026-31642`, :uv:cve:`2026-31673`, :uv:cve:`2026-31676`,
    :uv:cve:`2026-31681`, :uv:cve:`2026-31684`, :uv:cve:`2026-31685`,
    :uv:cve:`2026-31686`, :uv:cve:`2026-31694`, :uv:cve:`2026-31696`,
    :uv:cve:`2026-31697`, :uv:cve:`2026-31698`, :uv:cve:`2026-31699`,
    :uv:cve:`2026-31700`, :uv:cve:`2026-31701`, :uv:cve:`2026-31702`,
    :uv:cve:`2026-31704`, :uv:cve:`2026-31705`, :uv:cve:`2026-31708`,
    :uv:cve:`2026-31709`, :uv:cve:`2026-31711`, :uv:cve:`2026-31712`,
    :uv:cve:`2026-31715`, :uv:cve:`2026-31716`, :uv:cve:`2026-43052`,
    :uv:cve:`2026-43058`, :uv:cve:`2026-43064`, :uv:cve:`2026-43071`,
    :uv:cve:`2026-43072`, :uv:cve:`2026-43074`, :uv:cve:`2026-43075`,
    :uv:cve:`2026-43076`, :uv:cve:`2026-43079`, :uv:cve:`2026-43080`,
    :uv:cve:`2026-43085`, :uv:cve:`2026-43089`, :uv:cve:`2026-43093`,
    :uv:cve:`2026-43094`, :uv:cve:`2026-43098`, :uv:cve:`2026-43099`,
    :uv:cve:`2026-43103`, :uv:cve:`2026-43104`, :uv:cve:`2026-43105`,
    :uv:cve:`2026-43110`, :uv:cve:`2026-43111`, :uv:cve:`2026-43112`,
    :uv:cve:`2026-43113`, :uv:cve:`2026-43114`, :uv:cve:`2026-43116`,
    :uv:cve:`2026-43117`, :uv:cve:`2026-43216`, :uv:cve:`2026-43219`,
    :uv:cve:`2026-43303`, :uv:cve:`2026-43350`, :uv:cve:`2026-43421`,
    :uv:cve:`2026-43492`, :uv:cve:`2026-43493`, :uv:cve:`2026-43494`,
    :uv:cve:`2026-43495`, :uv:cve:`2026-43496`, :uv:cve:`2026-43497`,
    :uv:cve:`2026-43499`, :uv:cve:`2026-43501`, :uv:cve:`2026-43502`,
    :uv:cve:`2026-45834`, :uv:cve:`2026-45835`, :uv:cve:`2026-45836`,
    :uv:cve:`2026-45838`, :uv:cve:`2026-45839`, :uv:cve:`2026-45840`,
    :uv:cve:`2026-45841`, :uv:cve:`2026-45842`, :uv:cve:`2026-45843`,
    :uv:cve:`2026-45844`, :uv:cve:`2026-45846`, :uv:cve:`2026-45850`,
    :uv:cve:`2026-45930`, :uv:cve:`2026-45986`, :uv:cve:`2026-45987`,
    :uv:cve:`2026-45991`, :uv:cve:`2026-45994`, :uv:cve:`2026-45996`,
    :uv:cve:`2026-45997`, :uv:cve:`2026-45999`, :uv:cve:`2026-46002`,
    :uv:cve:`2026-46003`, :uv:cve:`2026-46004`, :uv:cve:`2026-46005`,
    :uv:cve:`2026-46006`, :uv:cve:`2026-46009`, :uv:cve:`2026-46015`,
    :uv:cve:`2026-46018`, :uv:cve:`2026-46019`, :uv:cve:`2026-46021`,
    :uv:cve:`2026-46022`, :uv:cve:`2026-46023`, :uv:cve:`2026-46024`,
    :uv:cve:`2026-46026`, :uv:cve:`2026-46027`, :uv:cve:`2026-46031`,
    :uv:cve:`2026-46033`, :uv:cve:`2026-46037`, :uv:cve:`2026-46038`,
    :uv:cve:`2026-46040`, :uv:cve:`2026-46043`, :uv:cve:`2026-46044`,
    :uv:cve:`2026-46046`, :uv:cve:`2026-46047`, :uv:cve:`2026-46049`,
    :uv:cve:`2026-46050`, :uv:cve:`2026-46051`, :uv:cve:`2026-46052`,
    :uv:cve:`2026-46053`, :uv:cve:`2026-46056`, :uv:cve:`2026-46058`,
    :uv:cve:`2026-46062`, :uv:cve:`2026-46064`, :uv:cve:`2026-46065`,
    :uv:cve:`2026-46069`, :uv:cve:`2026-46070`, :uv:cve:`2026-46072`,
    :uv:cve:`2026-46075`, :uv:cve:`2026-46077`, :uv:cve:`2026-46078`,
    :uv:cve:`2026-46079`, :uv:cve:`2026-46080`, :uv:cve:`2026-46082`,
    :uv:cve:`2026-46083`, :uv:cve:`2026-46086`, :uv:cve:`2026-46088`,
    :uv:cve:`2026-46091`, :uv:cve:`2026-46098`, :uv:cve:`2026-46099`,
    :uv:cve:`2026-46101`, :uv:cve:`2026-46102`, :uv:cve:`2026-46103`,
    :uv:cve:`2026-46107`, :uv:cve:`2026-46108`, :uv:cve:`2026-46109`,
    :uv:cve:`2026-46110`, :uv:cve:`2026-46112`, :uv:cve:`2026-46113`,
    :uv:cve:`2026-46116`, :uv:cve:`2026-46119`, :uv:cve:`2026-46120`,
    :uv:cve:`2026-46122`, :uv:cve:`2026-46123`, :uv:cve:`2026-46124`,
    :uv:cve:`2026-46125`, :uv:cve:`2026-46127`, :uv:cve:`2026-46128`,
    :uv:cve:`2026-46129`, :uv:cve:`2026-46132`, :uv:cve:`2026-46133`,
    :uv:cve:`2026-46135`, :uv:cve:`2026-46136`, :uv:cve:`2026-46137`,
    :uv:cve:`2026-46143`, :uv:cve:`2026-46146`, :uv:cve:`2026-46149`,
    :uv:cve:`2026-46150`, :uv:cve:`2026-46151`, :uv:cve:`2026-46159`,
    :uv:cve:`2026-46160`, :uv:cve:`2026-46161`, :uv:cve:`2026-46163`,
    :uv:cve:`2026-46164`, :uv:cve:`2026-46165`, :uv:cve:`2026-46167`,
    :uv:cve:`2026-46168`, :uv:cve:`2026-46169`, :uv:cve:`2026-46172`,
    :uv:cve:`2026-46173`, :uv:cve:`2026-46177`, :uv:cve:`2026-46178`,
    :uv:cve:`2026-46179`, :uv:cve:`2026-46180`, :uv:cve:`2026-46184`,
    :uv:cve:`2026-46185`, :uv:cve:`2026-46186`, :uv:cve:`2026-46187`,
    :uv:cve:`2026-46189`, :uv:cve:`2026-46190`, :uv:cve:`2026-46191`,
    :uv:cve:`2026-46193`, :uv:cve:`2026-46195`, :uv:cve:`2026-46196`,
    :uv:cve:`2026-46197`, :uv:cve:`2026-46198`, :uv:cve:`2026-46199`,
    :uv:cve:`2026-46205`, :uv:cve:`2026-46206`, :uv:cve:`2026-46208`,
    :uv:cve:`2026-46209`, :uv:cve:`2026-46212`, :uv:cve:`2026-46214`,
    :uv:cve:`2026-46218`, :uv:cve:`2026-46220`, :uv:cve:`2026-46227`,
    :uv:cve:`2026-46230`, :uv:cve:`2026-46231`, :uv:cve:`2026-46233`,
    :uv:cve:`2026-46234`, :uv:cve:`2026-46235`, :uv:cve:`2026-46236`,
    :uv:cve:`2026-46238`, :uv:cve:`2026-46242`, :uv:cve:`2026-46273`,
    :uv:cve:`2026-46275`, :uv:cve:`2026-46276`, :uv:cve:`2026-46280`,
    :uv:cve:`2026-46285`, :uv:cve:`2026-46291`, :uv:cve:`2026-46292`,
    :uv:cve:`2026-46294`, :uv:cve:`2026-46296`, :uv:cve:`2026-46299`,
    :uv:cve:`2026-46301`, :uv:cve:`2026-46303`, :uv:cve:`2026-46304`,
    :uv:cve:`2026-46306`, :uv:cve:`2026-46307`, :uv:cve:`2026-46314`,
    :uv:cve:`2026-46319`, :uv:cve:`2026-46320`, :uv:cve:`2026-46321`,
    :uv:cve:`2026-46322`, :uv:cve:`2026-46323`, :uv:cve:`2026-46331`,
    :uv:cve:`2026-52909`, :uv:cve:`2026-52910`, :uv:cve:`2026-52911`,
    :uv:cve:`2026-52912`, :uv:cve:`2026-52913`, :uv:cve:`2026-52914`,
    :uv:cve:`2026-52915`, :uv:cve:`2026-52916`, :uv:cve:`2026-52917`,
    :uv:cve:`2026-52918`, :uv:cve:`2026-52919`, :uv:cve:`2026-52920`,
    :uv:cve:`2026-52921`, :uv:cve:`2026-52922`, :uv:cve:`2026-52923`,
    :uv:cve:`2026-52924`, :uv:cve:`2026-52925`, :uv:cve:`2026-52926`,
    :uv:cve:`2026-52927`, :uv:cve:`2026-52928`, :uv:cve:`2026-52929`,
    :uv:cve:`2026-52930`, :uv:cve:`2026-52931`, :uv:cve:`2026-52933`,
    :uv:cve:`2026-52934`, :uv:cve:`2026-52935`, :uv:cve:`2026-52939`,
    :uv:cve:`2026-52941`, :uv:cve:`2026-52942`, :uv:cve:`2026-52943`,
    :uv:cve:`2026-52946`, :uv:cve:`2026-52947`, :uv:cve:`2026-52948`,
    :uv:cve:`2026-52954`, :uv:cve:`2026-52955`, :uv:cve:`2026-52957`,
    :uv:cve:`2026-52958`, :uv:cve:`2026-52962`, :uv:cve:`2026-52963`,
    :uv:cve:`2026-52967`, :uv:cve:`2026-52968`, :uv:cve:`2026-52969`,
    :uv:cve:`2026-52970`, :uv:cve:`2026-52972`, :uv:cve:`2026-52974`,
    :uv:cve:`2026-52975`, :uv:cve:`2026-52977`, :uv:cve:`2026-52981`,
    :uv:cve:`2026-52982`, :uv:cve:`2026-52984`, :uv:cve:`2026-52985`,
    :uv:cve:`2026-52986`, :uv:cve:`2026-52989`, :uv:cve:`2026-52992`,
    :uv:cve:`2026-52993`, :uv:cve:`2026-52995`, :uv:cve:`2026-52998`,
    :uv:cve:`2026-52999`, :uv:cve:`2026-53001`, :uv:cve:`2026-53002`,
    :uv:cve:`2026-53003`, :uv:cve:`2026-53004`, :uv:cve:`2026-53006`,
    :uv:cve:`2026-53011`, :uv:cve:`2026-53012`, :uv:cve:`2026-53016`,
    :uv:cve:`2026-53021`, :uv:cve:`2026-53022`, :uv:cve:`2026-53023`,
    :uv:cve:`2026-53033`, :uv:cve:`2026-53034`, :uv:cve:`2026-53035`,
    :uv:cve:`2026-53036`, :uv:cve:`2026-53037`, :uv:cve:`2026-53039`,
    :uv:cve:`2026-53040`, :uv:cve:`2026-53041`, :uv:cve:`2026-53043`,
    :uv:cve:`2026-53045`, :uv:cve:`2026-53046`, :uv:cve:`2026-53047`,
    :uv:cve:`2026-53048`, :uv:cve:`2026-53049`, :uv:cve:`2026-53050`,
    :uv:cve:`2026-53052`, :uv:cve:`2026-53056`, :uv:cve:`2026-53059`,
    :uv:cve:`2026-53060`, :uv:cve:`2026-53061`, :uv:cve:`2026-53062`,
    :uv:cve:`2026-53063`, :uv:cve:`2026-53064`, :uv:cve:`2026-53065`,
    :uv:cve:`2026-53066`, :uv:cve:`2026-53068`, :uv:cve:`2026-53069`,
    :uv:cve:`2026-53071`, :uv:cve:`2026-53072`, :uv:cve:`2026-53073`,
    :uv:cve:`2026-53074`, :uv:cve:`2026-53075`, :uv:cve:`2026-53077`,
    :uv:cve:`2026-53080`, :uv:cve:`2026-53082`, :uv:cve:`2026-53086`,
    :uv:cve:`2026-53088`, :uv:cve:`2026-53093`, :uv:cve:`2026-53096`,
    :uv:cve:`2026-53111`, :uv:cve:`2026-53112`, :uv:cve:`2026-53128`,
    :uv:cve:`2026-53130`, :uv:cve:`2026-53131`, :uv:cve:`2026-53133`,
    :uv:cve:`2026-53134`, :uv:cve:`2026-53135`, :uv:cve:`2026-53136`,
    :uv:cve:`2026-53137`, :uv:cve:`2026-53138`, :uv:cve:`2026-53139`,
    :uv:cve:`2026-53146`, :uv:cve:`2026-53147`, :uv:cve:`2026-53148`,
    :uv:cve:`2026-53149`, :uv:cve:`2026-53150`, :uv:cve:`2026-53157`,
    :uv:cve:`2026-53158`, :uv:cve:`2026-53159`, :uv:cve:`2026-53160`,
    :uv:cve:`2026-53161`, :uv:cve:`2026-53163`, :uv:cve:`2026-53167`,
    :uv:cve:`2026-53168`, :uv:cve:`2026-53176`, :uv:cve:`2026-53177`,
    :uv:cve:`2026-53181`, :uv:cve:`2026-53182`, :uv:cve:`2026-53183`,
    :uv:cve:`2026-53184`, :uv:cve:`2026-53186`, :uv:cve:`2026-53189`,
    :uv:cve:`2026-53194`, :uv:cve:`2026-53195`, :uv:cve:`2026-53196`,
    :uv:cve:`2026-53198`, :uv:cve:`2026-53199`, :uv:cve:`2026-53207`,
    :uv:cve:`2026-53208`, :uv:cve:`2026-53209`, :uv:cve:`2026-53212`,
    :uv:cve:`2026-53213`, :uv:cve:`2026-53215`, :uv:cve:`2026-53216`,
    :uv:cve:`2026-53217`, :uv:cve:`2026-53218`, :uv:cve:`2026-53219`,
    :uv:cve:`2026-53221`, :uv:cve:`2026-53223`, :uv:cve:`2026-53225`,
    :uv:cve:`2026-53227`, :uv:cve:`2026-53228`, :uv:cve:`2026-53236`,
    :uv:cve:`2026-53238`, :uv:cve:`2026-53239`, :uv:cve:`2026-53242`,
    :uv:cve:`2026-53245`, :uv:cve:`2026-53249`, :uv:cve:`2026-53252`,
    :uv:cve:`2026-53253`, :uv:cve:`2026-53254`, :uv:cve:`2026-53255`,
    :uv:cve:`2026-53256`, :uv:cve:`2026-53263`, :uv:cve:`2026-53264`,
    :uv:cve:`2026-53265`, :uv:cve:`2026-53266`, :uv:cve:`2026-53268`,
    :uv:cve:`2026-53269`, :uv:cve:`2026-53270`, :uv:cve:`2026-53273`,
    :uv:cve:`2026-53274`, :uv:cve:`2026-53275`, :uv:cve:`2026-53279`,
    :uv:cve:`2026-53287`, :uv:cve:`2026-53289`, :uv:cve:`2026-53291`,
    :uv:cve:`2026-53294`, :uv:cve:`2026-53295`, :uv:cve:`2026-53296`,
    :uv:cve:`2026-53303`, :uv:cve:`2026-53304`, :uv:cve:`2026-53306`,
    :uv:cve:`2026-53309`, :uv:cve:`2026-53314`, :uv:cve:`2026-53320`,
    :uv:cve:`2026-53325`, :uv:cve:`2026-53329`, :uv:cve:`2026-53331`,
    :uv:cve:`2026-53332`, :uv:cve:`2026-53337`, :uv:cve:`2026-53339`,
    :uv:cve:`2026-53343`, :uv:cve:`2026-53349`, :uv:cve:`2026-53350`,
    :uv:cve:`2026-53352`, :uv:cve:`2026-53354`, :uv:cve:`2026-53355`,
    :uv:cve:`2026-53356`, :uv:cve:`2026-53359`, :uv:cve:`2026-53362`,
    :uv:cve:`2026-53366`, :uv:cve:`2026-53392`, :uv:cve:`2026-53393`,
    :uv:cve:`2026-53399`, :uv:cve:`2026-53400`, :uv:cve:`2026-53402`,
    :uv:cve:`2026-63797`, :uv:cve:`2026-63810`, :uv:cve:`2026-63815`,
    :uv:cve:`2026-63818`, :uv:cve:`2026-63829`, :uv:cve:`2026-64187`,
    :uv:cve:`2026-64189`, :uv:cve:`2026-64206`, :uv:cve:`2026-64266`,
    :uv:cve:`2026-64268`, :uv:cve:`2026-64269`, :uv:cve:`2026-64271`,
    :uv:cve:`2026-64273`, :uv:cve:`2026-64274`, :uv:cve:`2026-64275`,
    :uv:cve:`2026-64276`, :uv:cve:`2026-64277`, :uv:cve:`2026-64279`,
    :uv:cve:`2026-64296`, :uv:cve:`2026-64297`, :uv:cve:`2026-64298`,
    :uv:cve:`2026-64299`, :uv:cve:`2026-64301`, :uv:cve:`2026-64303`,
    :uv:cve:`2026-64304`, :uv:cve:`2026-64306`, :uv:cve:`2026-64312`,
    :uv:cve:`2026-64313`, :uv:cve:`2026-64315`, :uv:cve:`2026-64316`,
    :uv:cve:`2026-64317`, :uv:cve:`2026-64318`, :uv:cve:`2026-64322`,
    :uv:cve:`2026-64323`, :uv:cve:`2026-64324`, :uv:cve:`2026-64329`,
    :uv:cve:`2026-64330`, :uv:cve:`2026-64331`, :uv:cve:`2026-64332`,
    :uv:cve:`2026-64333`, :uv:cve:`2026-64334`, :uv:cve:`2026-64335`,
    :uv:cve:`2026-64336`, :uv:cve:`2026-64337`, :uv:cve:`2026-64338`,
    :uv:cve:`2026-64340`, :uv:cve:`2026-64342`, :uv:cve:`2026-64343`,
    :uv:cve:`2026-64344`, :uv:cve:`2026-64346`, :uv:cve:`2026-64347`,
    :uv:cve:`2026-64350`, :uv:cve:`2026-64351`, :uv:cve:`2026-64352`,
    :uv:cve:`2026-64355`, :uv:cve:`2026-64359`, :uv:cve:`2026-64360`,
    :uv:cve:`2026-64361`, :uv:cve:`2026-64362`, :uv:cve:`2026-64363`,
    :uv:cve:`2026-64364`, :uv:cve:`2026-64365`, :uv:cve:`2026-64372`,
    :uv:cve:`2026-64373`, :uv:cve:`2026-64374`, :uv:cve:`2026-64376`,
    :uv:cve:`2026-64379`, :uv:cve:`2026-64380`, :uv:cve:`2026-64381`,
    :uv:cve:`2026-64390`, :uv:cve:`2026-64393`, :uv:cve:`2026-64394`,
    :uv:cve:`2026-64395`, :uv:cve:`2026-64396`, :uv:cve:`2026-64397`,
    :uv:cve:`2026-64398`, :uv:cve:`2026-64399`, :uv:cve:`2026-64401`,
    :uv:cve:`2026-64403`, :uv:cve:`2026-64406`, :uv:cve:`2026-64408`,
    :uv:cve:`2026-64409`, :uv:cve:`2026-64411`, :uv:cve:`2026-64412`,
    :uv:cve:`2026-64413`, :uv:cve:`2026-64417`, :uv:cve:`2026-64419`,
    :uv:cve:`2026-64422`, :uv:cve:`2026-64423`, :uv:cve:`2026-64425`,
    :uv:cve:`2026-64428`, :uv:cve:`2026-64429`, :uv:cve:`2026-64436`,
    :uv:cve:`2026-64437`, :uv:cve:`2026-64438`, :uv:cve:`2026-64440`,
    :uv:cve:`2026-64445`, :uv:cve:`2026-64446`, :uv:cve:`2026-64449`,
    :uv:cve:`2026-64450`, :uv:cve:`2026-64452`, :uv:cve:`2026-64454`,
    :uv:cve:`2026-64455`, :uv:cve:`2026-64456`, :uv:cve:`2026-64458`,
    :uv:cve:`2026-64461`, :uv:cve:`2026-64462`, :uv:cve:`2026-64465`,
    :uv:cve:`2026-64468`, :uv:cve:`2026-64469`, :uv:cve:`2026-64470`,
    :uv:cve:`2026-64471`, :uv:cve:`2026-64472`, :uv:cve:`2026-64476`,
    :uv:cve:`2026-64478`, :uv:cve:`2026-64483`, :uv:cve:`2026-64487`,
    :uv:cve:`2026-64494`, :uv:cve:`2026-64495`, :uv:cve:`2026-64496`,
    :uv:cve:`2026-64497`, :uv:cve:`2026-64500`, :uv:cve:`2026-64504`,
    :uv:cve:`2026-64505`, :uv:cve:`2026-64512`, :uv:cve:`2026-64514`,
    :uv:cve:`2026-64530`, :uv:cve:`2026-64531`, :uv:cve:`2026-64534`,
    :uv:cve:`2026-64535`, :uv:cve:`2026-64537`, :uv:cve:`2026-64538`,
    :uv:cve:`2026-64539`, :uv:cve:`2026-64540`, :uv:cve:`2026-64544`,
    :uv:cve:`2026-64545`, :uv:cve:`2026-64546`, :uv:cve:`2026-64547`,
    :uv:cve:`2026-64549`, :uv:cve:`2026-64550`, :uv:cve:`2026-64551`,
    :uv:cve:`2026-64552`, :uv:cve:`2026-64553`, :uv:cve:`2026-64554`,
    :uv:cve:`2026-64557`, :uv:cve:`2026-64560`, :uv:cve:`2026-64600`)
    (:uv:bug:`59588`, :uv:bug:`59662`, :uv:bug:`59713`)

  * :program:`mariadb` (:uv:cve:`2025-13699`, :uv:cve:`2026-21968`,
    :uv:cve:`2026-34303`, :uv:cve:`2026-3494`, :uv:cve:`2026-44168`,
    :uv:cve:`2026-44170`, :uv:cve:`2026-44171`, :uv:cve:`2026-44172`,
    :uv:cve:`2026-44173`, :uv:cve:`2026-48163`, :uv:cve:`2026-48165`,
    :uv:cve:`2026-49261`) (:uv:bug:`59613`)

  * :program:`mesa` (:uv:cve:`2026-40393`) (:uv:bug:`59609`)

  * :program:`nss` (:uv:cve:`2026-12318`, :uv:cve:`2026-16389`,
    :uv:cve:`2026-6766`, :uv:cve:`2026-6767`, :uv:cve:`2026-6772`)
    (:uv:bug:`59688`, :uv:bug:`59748`)

  * :program:`nvidia-graphics-drivers` (:uv:cve:`2025-23280`,
    :uv:cve:`2025-23282`, :uv:cve:`2025-23300`, :uv:cve:`2025-23330`,
    :uv:cve:`2025-23332`, :uv:cve:`2025-23345`, :uv:cve:`2025-33219`)
    (:uv:bug:`59775`)

  * :program:`openjdk-17` (:uv:cve:`2026-22007`, :uv:cve:`2026-22013`,
    :uv:cve:`2026-22016`, :uv:cve:`2026-22018`, :uv:cve:`2026-22021`,
    :uv:cve:`2026-23865`, :uv:cve:`2026-34268`, :uv:cve:`2026-34282`,
    :uv:cve:`2026-41254`, :uv:cve:`2026-46917`, :uv:cve:`2026-46968`,
    :uv:cve:`2026-47010`, :uv:cve:`2026-47021`, :uv:cve:`2026-47027`,
    :uv:cve:`2026-47059`, :uv:cve:`2026-47063`, :uv:cve:`2026-60147`,
    :uv:cve:`2026-60589`, :uv:cve:`2026-61308`, :uv:cve:`2026-70907`)
    (:uv:bug:`59699`, :uv:bug:`59858`)

  * :program:`openssl` (:uv:cve:`2026-34180`, :uv:cve:`2026-34182`,
    :uv:cve:`2026-42766`, :uv:cve:`2026-42770`, :uv:cve:`2026-45445`,
    :uv:cve:`2026-45446`, :uv:cve:`2026-45447`, :uv:cve:`2026-7383`,
    :uv:cve:`2026-9076`) (:uv:bug:`59497`)

  * :program:`pam` (:uv:cve:`2024-22365`, :uv:cve:`2025-6020`)
    (:uv:bug:`58946`)

  * :program:`pcre2` (:uv:cve:`2026-86145`) (:uv:bug:`59909`)

  * :program:`poppler` (:uv:cve:`2024-6239`, :uv:cve:`2025-43718`,
    :uv:cve:`2025-43903`, :uv:cve:`2025-50420`, :uv:cve:`2025-52885`,
    :uv:cve:`2025-52886`, :uv:cve:`2026-10118`) (:uv:bug:`59499`,
    :uv:bug:`59698`)

  * :program:`postgresql-15` (:uv:cve:`2025-8714`,
    :uv:cve:`2026-14662`, :uv:cve:`2026-14663`, :uv:cve:`2026-14664`,
    :uv:cve:`2026-14666`, :uv:cve:`2026-14668`, :uv:cve:`2026-14669`,
    :uv:cve:`2026-14670`, :uv:cve:`2026-14671`, :uv:cve:`2026-14672`,
    :uv:cve:`2026-14673`, :uv:cve:`2026-14676`, :uv:cve:`2026-14677`,
    :uv:cve:`2026-14678`, :uv:cve:`2026-14679`, :uv:cve:`2026-14680`,
    :uv:cve:`2026-14681`, :uv:cve:`2026-15741`, :uv:cve:`2026-15742`,
    :uv:cve:`2026-16238`, :uv:cve:`2026-16239`, :uv:cve:`2026-16241`,
    :uv:cve:`2026-18024`, :uv:cve:`2026-18408`, :uv:cve:`2026-19385`,
    :uv:cve:`2026-6464`, :uv:cve:`2026-6469`, :uv:cve:`2026-6470`,
    :uv:cve:`2026-6471`, :uv:cve:`2026-6473`) (:uv:bug:`59751`)

  * :program:`protobuf` (:uv:cve:`2024-7254`, :uv:cve:`2025-4565`,
    :uv:cve:`2026-0994`, :uv:cve:`2026-6409`) (:uv:bug:`59620`)

  * :program:`pydantic` (:uv:cve:`2024-3772`) (:uv:bug:`59614`)

  * :program:`python-httplib2` (:uv:cve:`2026-59939`)
    (:uv:bug:`59774`)

  * :program:`python-markdown` (:uv:cve:`2025-69534`)
    (:uv:bug:`59623`)

  * :program:`python-urllib3` (:uv:cve:`2026-44431`) (:uv:bug:`59571`)

  * :program:`python3.11` (:uv:cve:`2023-52425`, :uv:cve:`2025-13462`,
    :uv:cve:`2026-0672`, :uv:cve:`2026-2297`, :uv:cve:`2026-3644`,
    :uv:cve:`2026-4224`, :uv:cve:`2026-4519`, :uv:cve:`2026-6100`)
    (:uv:bug:`59628`)

  * :program:`rsync` (:uv:cve:`2026-45232`) (:uv:bug:`59624`)

  * :program:`samba` (:uv:cve:`2026-58216`, :uv:cve:`2026-58218`,
    :uv:cve:`2026-58221`, :uv:cve:`2026-58222`, :uv:cve:`2026-58224`,
    :uv:cve:`2026-6949`) (:uv:bug:`59665`)

  * :program:`shim` (:uv:cve:`2024-2312`) (:uv:bug:`59616`)

  * :program:`shim-helpers-amd64-signed` (:uv:cve:`2024-2312`)
    (:uv:bug:`59616`)

  * :program:`shim-signed` (:uv:cve:`2024-2312`) (:uv:bug:`59616`)

  * :program:`squid` (:uv:cve:`2026-33515`, :uv:cve:`2026-33526`,
    :uv:cve:`2026-47729`, :uv:cve:`2026-50012`) (:uv:bug:`59682`)

  * :program:`univention-directory-manager-rest` (:uv:bug:`59761`)

  * :program:`xorg-server` (:uv:cve:`2022-49737`,
    :uv:cve:`2026-50256`, :uv:cve:`2026-50257`, :uv:cve:`2026-50258`,
    :uv:cve:`2026-50259`, :uv:cve:`2026-50260`, :uv:cve:`2026-50261`,
    :uv:cve:`2026-50262`, :uv:cve:`2026-50263`, :uv:cve:`2026-50264`)
    (:uv:bug:`59750`)

  * :program:`xz-utils` (:uv:cve:`2026-34743`) (:uv:bug:`59619`)


.. _debian:

* |UCSUCS| |release| includes the following updated packages from Debian 12.15:

  * :program:`appstream`
  * :program:`beets`
  * :program:`ca-certificates`
  * :program:`dcmtk`
  * :program:`debian-installer`
  * :program:`ghdl`
  * :program:`gss`
  * :program:`indi-orion-ssg3`
  * :program:`jackson-core`
  * :program:`kernel-wedge`
  * :program:`libapache-session-browseable-perl`
  * :program:`libass`
  * :program:`libcaca`
  * :program:`libdbd-csv-perl`
  * :program:`libgd-perl`
  * :program:`libhtml-gumbo-perl`
  * :program:`libmatio`
  * :program:`libtext-csv-xs-perl`
  * :program:`linux-base`
  * :program:`linuxcnc`
  * :program:`llvm-toolchain-22`
  * :program:`mistral`
  * :program:`node-regexpp`
  * :program:`nvidia-settings`
  * :program:`ojalgo`
  * :program:`okular`
  * :program:`openslide`
  * :program:`phpunit`
  * :program:`rlottie`
  * :program:`ruby-css-parser`
  * :program:`sentry-python`
  * :program:`sslh`
  * :program:`swift`
  * :program:`sylpheed`
  * :program:`sympa`
  * :program:`u-boot`
  * :program:`wolfssl`

.. _changelog-basic:

*********************
Basic system services
*********************

.. _changelog-basis-ucr:

Univention Configuration Registry
=================================

* The C library of UCR now supports arbitrary variable value lengths instead of
  cutting the values at 1024 chars (:uv:bug:`51864`).

.. _changelog-basis-other:

Other system services
=====================

* ``univention-ssh`` now deactivates SSH public key authentication when
  authenticating with machine account credentials. This avoids authentication
  failures caused by excessive SSH authentication attempts. Further
  security-related configuration options for joined systems have been added
  (:uv:bug:`59144`).

.. _changelog-domain:

***************
Domain services
***************

* The ``server_password_change`` utilities no longer print
  ``Bad file descriptor`` error messages when invoked through Debian post-installation scripts.
  In this case, the utilities write debug output to standard error instead
  (:uv:bug:`56630`).

* Database connection and authentication failures no longer produce repeated
  Python tracebacks during system installation. The failures are now logged as
  concise error messages (:uv:bug:`51671`).

.. _changelog-domain-openldap:

OpenLDAP
========

* The configuration of the OpenLDAP ``memberof`` overlay moved into the
  ``univention-ldap-server`` package.
  The ``univention-ldap-overlay-memberof`` package is now an empty transitional package.
  You can safely remove it (:uv:bug:`47464`).

* The LDAP server could crash during a simple bind when an account using the
  ``{KINIT}`` password scheme had no ``krb5PrincipalName`` attribute or when a
  Kerberos lookup failed.  Repeated bind attempts could also leak memory, and
  temporary password data was not always completely cleared.  The LDAP overlay
  module now handles these cases safely, releases Kerberos resources correctly,
  and clears the complete temporary password buffer (:uv:bug:`59920`).

* The LDAP server could crash during concurrent simple binds using the
  ``{KINIT}`` password scheme because authentication requests shared Kerberos
  state. Each bind now uses an isolated Kerberos context, preventing memory
  corruption and ensuring that authentication resources are released safely
  (:uv:bug:`59921`).

* Disabling a user account no longer invalidates the password hash stored in the
  LDAP attribute ``userPassword``. This allows the Keycloak Identity Provider to
  distinguish a disabled account from invalid credentials and report the
  appropriate authentication error. The ``shadowbind`` LDAP overlay is now
  mandatory to ensure that disabled user accounts cannot authenticate using
  LDAP bind (:uv:bug:`59898`).

.. _changelog-domain-openldap-replication:

Listener/Notifier domain replication
------------------------------------

* The directory replication OID skip list now contains the built-in schema
  definitions from OpenLDAP 2.6 to allow mixed environments with UCS 5.3
  (:uv:bug:`59532`).

* The Univention Directory Listener shutdown handling is now signal-safe
  to avoid segmentation faults when terminating while embedded Python handler
  code is active (:uv:bug:`59541`).

.. _changelog-udm:

LDAP Directory Manager
======================

* Paginated searches returned an empty result when requesting a page number
  that isn't larger than the previously requested one, for example when navigating
  back to a previous page (:uv:bug:`59466`).

* The performance of object searches using ``opened=0`` has been improved. The
  API now avoids loading and decoding full UDM objects when it only requests object
  metadata. This significantly speeds up large search result sets
  (:uv:bug:`59579`).

* The UDM module search API has been extended to allow passing ``opened=True``
  for UDM modules which support it (:uv:bug:`59579`).

* Total user-count metrics now exclude system accounts
  (:uv:bug:`59634`).

* The ``opened`` query parameter of the object search was missing from the
  OpenAPI/Swagger schema and is now included (:uv:bug:`59575`).

* The UDM HTTP REST API command line doesn't depend on the UCR default layer anymore
  for compatibility with Nubus for Kubernetes (:uv:bug:`59837`).

* The experimental delegative administration feature can cause UDM functionality
  to crash when it processes invalid LDAP data.
  UDM now ignores affected properties during delegative administration evaluation
  (:uv:bug:`59560`).

* The performance of object processing has been improved by reducing the
  overhead of mapping LDAP attributes to UDM properties. In environments with
  many objects, such as when retrieving large result sets through the UDM HTTP REST
  API, this noticeably speeds up object retrieval (:uv:bug:`59578`).

* The syntax validation for Guardian role values has been relaxed. Role
  identifiers are no longer restricted to the previous ``app:namespace:role``
  format, allowing arbitrary role strings to be used (:uv:bug:`59603`).

* The generation of the ``sambaNTPassword`` LDAP attribute can now be deactivated
  through the UCR variable :envvar:`password/samba/nthash`. When deactivated, existing NT
  hashes are removed during the next password change. Be aware that this breaks
  services relying on NT password hashes, including S4/AD Connector password
  synchronization, Squid NTLM authentication, and RADIUS MS-CHAP/NTLM
  authentication (:uv:bug:`59607`).

* The ``--list-dns`` option of ``univention-license-check`` was broken by erratum
  394 and has been repaired (:uv:bug:`59633`).

* The order of extended attributes in the layout has been corrected in cases
  where no built-in layout elements exist for a custom tab. UDM now
  displays custom groups and properties in a consistent and predictable order
  (:uv:bug:`48612`).

* The default authorization role ``udm:default-roles:helpdesk-operator`` for the
  experimental delegative administration feature was missing read permissions
  for mandatory user properties (``username``, ``lastname``, ``primaryGroup``, ``unixhome``,
  ``mailForwardCopyToSelf``). This caused errors when opening or saving user
  objects in UMC as a helpdesk operator (:uv:bug:`59673`).

.. _changelog-umc:

*****************************
Univention Management Console
*****************************

.. _changelog-umc-web:

Univention Management Console web interface
===========================================

* When users deselect a single item from an all-selected state, the grid header
  :guilabel:`select all` checkbox now displays the unselected state instead of
  the indeterminate state (:uv:bug:`59147`).

* The DOMpurify library has been upgraded to the latest version (2.5.9,
  :uv:bug:`59808`).

.. _changelog-umc-appcenter:

Univention App Center
=====================

* The App Center has been adapted to be compatible with future ``ruamel.yaml``
  API deprecations (:uv:bug:`59521`).

* The App Center UMC module is now able to handle the installation of new
  dependencies during the upgrade of an app (:uv:bug:`59717`).

* Apps that can be installed multiple times in the domain can now specify
  whether to install first on the *Primary Directory Node*
  (:uv:bug:`59895`).

* An internal flag for ``univention-app register listener`` has been added. This
  allows the forced removal of a listener module and the listener-trigger
  service (:uv:bug:`59919`).

.. _changelog-umc-setup:

Modules for system settings / setup wizard
==========================================

* The system setup no longer selects the ``univention-ldap-overlay-memberof``
  package for installation, as the OpenLDAP ``memberof`` overlay configuration is
  now part of the ``univention-ldap-server`` package (:uv:bug:`47464`).

* Automatic DNS updates of the SSO record during IP address changes now
  correctly honor the UCR variable :envvar:`keycloak/server/sso/autoregistration`
  (:uv:bug:`59759`).

* The IP address registration during system startup no longer incorrectly
  reports a host's existing IP address as already in use (:uv:bug:`53252`,
  :uv:bug:`59759`).

.. _changelog-umc-user:

User management
===============

* The Self Service now uses clearer wording for the email address used for
  account recovery (:uv:bug:`59583`).

.. _changelog-umc-diagnostic:

System diagnostic module
========================

* The error message for the ``11_nameserver`` check was broken and has been
  corrected (:uv:bug:`59489`).

* The ``20_check_share_references`` check now only runs on the *Primary Directory
  Node*. It binds as the machine account, which on a UCS\@school school replica
  may not read the objects of other schools, so shares referencing a server of
  another school were incorrectly reported as dangling references
  (:uv:bug:`59718`).

.. _changelog-umc-ldap:

LDAP directory browser
======================

* Set ``*`` as default search value when automatic substring search is deactivated
  (:uv:bug:`59444`).

* The performance of object searches using ``opened=0`` has been improved. The
  API now avoids loading and decoding full UDM objects when it only requests object
  metadata. This significantly speeds up large search result sets
  (:uv:bug:`59579`).

* The experimental paginated object search supports LDAP Server Side Sorting
  (SSS) with either Simple Paged Results (SPR) or Virtual List View (VLV).
  Use this feature for evaluation only.
  Univention doesn't support it for production use yet.
  Known limitations affect scalability, process-local pagination state, and
  recovery after LDAP server restarts. To use VLV, enable the LDAP SSSVLV
  overlay and configure it correctly (:uv:bug:`50240`).

* Empty search queries now always return all results (:uv:bug:`59595`).

.. _changelog-lib:

*************************
Univention base libraries
*************************

* You can configure the timeout for LDAP extension activation in ``ucs_registerLDAPExtension``
  through the UCR variable
  :envvar:`directory/manager/ldap_extension/timeout/activation` (:uv:bug:`59474`).

* Authentication retry handling in the UMC client has been corrected.
  Previously, under certain authentication failures, the client could
  repeatedly retry authentication until it reached the Python recursion limit.
  The retry logic now performs a limited number of authentication attempts
  before reporting the authentication failure to the caller (:uv:bug:`58380`).

.. _changelog-service:

***************
System services
***************

.. _changelog-service-saml:

SAML
====

* The SAML integration now supports API changes in newer ``python-keycloak``
  versions (:uv:bug:`59517`).

* The :program:`crudesaml` package epoch has been increased to ensure a valid upgrade path
  to UCS 5.3 and restore the original upstream package version
  (:uv:bug:`59511`).

.. _changelog-service-mail:

Mail services
=============

.. _changelog-service-imap:

IMAP services
-------------

* UCS 5.3 upgrades with Dovecot 2.4 now use the UCR template
  :file:`/etc/dovecot/conf.d/90-sieve-extprograms.conf`
  to write a compatible configuration file (:uv:bug:`59520`).

.. _changelog-service-radius:

RADIUS
======

* The username of the inner tunnel is now passed to the default connection.
  For example, this allows assigning a VLAN based on this authenticated username
  instead of inheriting unverified settings from the outer tunnel ("anonymous
  login", :uv:bug:`59456`).

* The performance of NTLM authentication with RADIUS has been significantly
  improved, reducing authentication times and CPU load under high request
  volumes. The ``univention-radius-ntlm-auth`` helper has been rewritten in
  Rust for this purpose (:uv:bug:`59042`).

.. _changelog-service-pam:

PAM / Local group cache
=======================

* Printing with iPads could cause CUPS to hang or slow down the print dialog.
  The ``pam_krb5`` Kerberos authentication step is now skipped in the PAM auth
  stack when the service is ``cups``, preventing unnecessary Kerberos lookups
  during CUPS authentication (:uv:bug:`59552`).

.. _changelog-service-network:

Networking services
===================

* During system startup, IP address registration now retries temporary
  communication failures while Univention Management Console services are still
  starting instead of failing (:uv:bug:`53252`).

.. _changelog-win:

********************
Services for Windows
********************

.. _changelog-win-samba:

Samba
=====

* Windows domain trust validation could fail
  because ``winbindd`` got stuck attempting an SMB connection
  that Microsoft Active Directory neither required nor permitted.
  For example, this occurred when Active Directory enabled
  ``Require NTLMv2 session security`` (:uv:bug:`59601`).

* Samba 4.24 now lets Windows clients open symbolic links
  (:uv:bug:`59706`).

.. _changelog-win-s4c:

Univention S4 Connector
=======================

* The S4 Connector now retries primary group synchronization after the
  corresponding group becomes available in Samba/AD (:uv:bug:`52788`).

.. _changelog-win-adc:

Univention Active Directory Connection
======================================

* During password synchronization to UCS, the ``univention-ad-connector`` now
  sets the ``msDS-SupportedEncryptionTypes`` attribute in Active Directory only
  for bidirectional synchronization configurations (:uv:bug:`59692`).

* The AD Connector now retries primary group synchronization after the
  corresponding group becomes available in AD (:uv:bug:`59694`).

* The ``allowfilter`` and ``ignorefilter`` settings from the AD Connector now support
  basic substring matching for values, for example ``*string*`` (:uv:bug:`59701`).

* During password synchronization from Active Directory to UCS, the AD Connector
  now synchronizes Kerberos keys by default. This lets UCS use more secure key
  types after a password change in Active Directory (:uv:bug:`57689`).

.. _changelog-other:

*************
Other changes
*************

* The Python LDAP client now correctly preserves the LDAP Virtual List View
  (VLV) search context between requests. This significantly improves the
  performance of repeated VLV requests and reduces server load when
  applications use VLV-based pagination, such as the experimental pagination
  feature of the UDM HTTP REST API (:uv:bug:`59666`).

* The Cerbos Python SDK provides Python clients for accessing Cerbos. In UCS,
  it supports HTTP only, not gRPC (:uv:bug:`59901`).

* This is the first release of the Cerbos-based Guardian component for UCS.
  It replaces the OPA-based Guardian and is intended for use only with
  Univention software. There is no upgrade path from the OPA-based Guardian
  to the new component. This update removes the OPA-based Guardian, so you
  don't need to take any action (:uv:bug:`59669`).