Security updates for Friday (lwn.net)

Security updates have been issued by <b>AlmaLinux</b> (apr-util and qt6-qt5compat), <b>Debian</b> (libevent and ruby-rack), <b>Fedora</b> (bluez, corosync, curl, dokuwiki, grpcurl, libevent, and rest), <b>Oracle</b> (gstreamer1-plugins-bad-free, perl-DBI, python-urllib3, qt5-qtbase, qt6-qt5compat, and thunderbird), <b>Red Hat</b> (osbuild-composer), <b>SUSE</b> (azure-storage-azcopy, chromedriver, corosync, ggml-devel, helm, kernel, libmariadb-devel, libzypp, zypper, opensc, php7, tomcat10, and waylyrics), and <b>Ubuntu</b> (apache2, beets, glibc, kissfft, libebml, linux-nvidia-6.17, php8.1, php8.3, php8.5, and python2.7, python3.4, python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.14).