a/hwdata-0.381-noarch-1.txz: Upgraded.
a/kernel-generic-6.6.25-x86_64-1.txz: Upgraded.
a/kernel-huge-6.6.25-x86_64-1.txz: Upgraded.
a/kernel-modules-6.6.25-x86_64-1.txz: Upgraded.
d/cmake-3.29.1-x86_64-1.txz: Upgraded.
d/kernel-headers-6.6.25-x86-1.txz: Upgraded.
d/llvm-18.1.3-x86_64-1.txz: Upgraded.
k/kernel-source-6.6.25-noarch-1.txz: Upgraded.
kde/kstars-3.7.0-x86_64-1.txz: Upgraded.
l/enchant-2.6.9-x86_64-1.txz: Upgraded.
l/libclc-18.1.3-x86_64-1.txz: Upgraded.
l/sof-firmware-2024.03-noarch-1.txz: Upgraded.
n/gnutls-3.8.5-x86_64-1.txz: Upgraded.
n/httpd-2.4.59-x86_64-1.txz: Upgraded.
This update fixes security issues:
HTTP/2 DoS by memory exhaustion on endless continuation frames.
HTTP Response Splitting in multiple modules.
HTTP response splitting.
For more information, see:
https://downloads.apache.org/httpd/CHANGES_2.4.59https://www.cve.org/CVERecord?id=CVE-2024-27316https://www.cve.org/CVERecord?id=CVE-2024-24795https://www.cve.org/CVERecord?id=CVE-2023-38709
(* Security fix *)
n/nghttp2-1.61.0-x86_64-1.txz: Upgraded.
This update fixes security issues:
nghttp2 library keeps reading the unbounded number of HTTP/2 CONTINUATION
frames even after a stream is reset to keep HPACK context in sync. This
causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates
this vulnerability by limiting the number of CONTINUATION frames it can
accept after a HEADERS frame.
For more information, see:
https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57qhttps://www.kb.cert.org/vuls/id/421644https://www.cve.org/CVERecord?id=CVE-2024-28182
(* Security fix *)
x/xdg-desktop-portal-1.18.3-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
d/mercurial-6.7.1-x86_64-1.txz: Upgraded.
d/rust-1.77.0-x86_64-1.txz: Upgraded.
l/cairomm1-1.18.0-x86_64-1.txz: Added.
Thanks to jloco.
l/glibmm2-2.78.1-x86_64-1.txz: Added.
Thanks to jloco.
l/gtkmm4-4.12.0-x86_64-1.txz: Added.
Thanks to jloco.
l/libclc-18.1.2-x86_64-1.txz: Upgraded.
l/pangomm-2.46.4-x86_64-1.txz: Upgraded.
l/pangomm2-2.50.2-x86_64-1.txz: Added.
Thanks to jloco.
n/openvpn-2.6.10-x86_64-1.txz: Upgraded.
x/libkkc-0.3.5-x86_64-5.txz: Rebuilt.
Use python for the build, not python2.
x/libkkc-data-0.2.7-x86_64-5.txz: Rebuilt.
Use python for the build, not python2.
x/marisa-0.2.6-x86_64-8.txz: Rebuilt.
Drop python2 support and rebuild marisa module for python3.
x/wayland-protocols-1.34-noarch-1.txz: Upgraded.
a/kernel-generic-5.10.7-x86_64-1.txz: Upgraded.
a/kernel-huge-5.10.7-x86_64-1.txz: Upgraded.
a/kernel-modules-5.10.7-x86_64-1.txz: Upgraded.
a/libblockdev-2.25-x86_64-1.txz: Upgraded.
ap/sudo-1.9.5p1-x86_64-1.txz: Upgraded.
Fixed a regression introduced in sudo 1.9.5 where the editor run by sudoedit
was set-user-ID root unless SELinux RBAC was in use. The editor is now run
with the user's real and effective user-IDs.
d/autoconf-2.69-noarch-2.txz: Rebuilt.
We're seeing failures using autoconf-2.70 with some packages that use
autoreconf. It looks like most distributions have not moved on to
autoconf-2.70, and probably we shouldn't either until the next release cycle.
Thanks to nobodino.
d/kernel-headers-5.10.7-x86-1.txz: Upgraded.
e/emacs-27.1-x86_64-2.txz: Rebuilt.
Increase SYSTEM_PURESIZE_EXTRA to 100000 to avoid overflows. Nobody should be
too concerned about adding 97K to emacs' memory footprint given the amount of
memory available on modern machines. Thanks to Jefferson for the bug report.
k/kernel-source-5.10.7-noarch-1.txz: Upgraded.
l/libclc-11.0.1-x86_64-1.txz: Upgraded.
Thanks to USUARIONUEVO.
l/python-pygments-2.7.4-x86_64-1.txz: Upgraded.
n/gnupg2-2.2.27-x86_64-1.txz: Upgraded.
n/socat-1.7.4.1-x86_64-1.txz: Upgraded.
x/libdrm-2.4.104-x86_64-1.txz: Upgraded.
x/libevdev-1.10.1-x86_64-1.txz: Upgraded.
x/vulkan-sdk-1.2.141.0-x86_64-2.txz: Rebuilt.
Install additional Vulkan-ValidationLayers-sdk header files.
Thanks to walecha.
xap/mozilla-thunderbird-78.6.1-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/78.6.1/releasenotes/https://www.mozilla.org/en-US/security/advisories/mfsa2021-02/https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16044
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
