a/kernel-firmware-20220413_8a2d811-noarch-1.txz: Upgraded.
a/sysvinit-3.03-x86_64-1.txz: Upgraded.
a/xz-5.2.5-x86_64-4.txz: Rebuilt.
This update fixes a security issue:
xzgrep applied to a crafted file name with two or more newlines can no
longer overwrite an arbitrary, attacker-selected file.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271
(* Security fix *)
d/git-2.35.3-x86_64-1.txz: Upgraded.
This update fixes a security issue where a Git worktree created by another
user might be able to execute arbitrary code.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24765
(* Security fix *)
l/libaio-0.3.113-x86_64-1.txz: Upgraded.
l/tevent-0.12.0-x86_64-1.txz: Upgraded.
n/php-7.4.29-x86_64-1.txz: Upgraded.
extra/php81/php81-8.1.5-x86_64-1.txz: Upgraded.
ap/man-db-2.10.2-x86_64-1.txz: Upgraded.
d/python3-3.9.11-x86_64-1.txz: Upgraded.
This update fixes bugs and security issues:
libexpat upgraded from 2.4.1 to 2.4.7
bundled pip upgraded from 21.2.4 to 22.0.4
authorization bypass fixed in urllib.request
REDoS avoided in importlib.metadata
For more information, see:
https://pythoninsider.blogspot.com/2022/03/python-3103-3911-3813-and-3713-are-now.htmlhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28363
(* Security fix *)
l/nodejs-16.14.2-x86_64-1.txz: Upgraded.
n/gnutls-3.7.4-x86_64-1.txz: Upgraded.
extra/php80/php80-8.0.17-x86_64-1.txz: Upgraded.
extra/php81/php81-8.1.4-x86_64-1.txz: Upgraded.
a/btrfs-progs-5.16.2-x86_64-1.txz: Upgraded.
a/kernel-generic-5.16.10-x86_64-1.txz: Upgraded.
a/kernel-huge-5.16.10-x86_64-1.txz: Upgraded.
a/kernel-modules-5.16.10-x86_64-1.txz: Upgraded.
ap/cups-filters-1.28.12-x86_64-1.txz: Upgraded.
ap/qpdf-10.6.2-x86_64-1.txz: Upgraded.
d/kernel-headers-5.16.10-x86-1.txz: Upgraded.
k/kernel-source-5.16.10-noarch-1.txz: Upgraded.
AMD_PTDMA n -> m
Thanks to walecha.
l/imagemagick-7.1.0_25-x86_64-1.txz: Upgraded.
l/librsvg-2.52.6-x86_64-1.txz: Upgraded.
l/pipewire-0.3.46-x86_64-1.txz: Upgraded.
n/php-7.4.28-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
UAF due to php_filter_float() failing for ints.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21708
(* Security fix *)
x/libdrm-2.4.110-x86_64-1.txz: Upgraded.
xap/mozilla-firefox-97.0.1-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/firefox/97.0.1/releasenotes/
xap/mozilla-thunderbird-91.6.1-x86_64-1.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/91.6.1/releasenotes/https://www.mozilla.org/en-US/security/advisories/mfsa2022-07/https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0566
(* Security fix *)
extra/php80/php80-8.0.16-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
UAF due to php_filter_float() failing for ints.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21708
(* Security fix *)
extra/php81/php81-8.1.3-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
UAF due to php_filter_float() failing for ints.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21708
(* Security fix *)
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
