ChangeLog for: 2022-06-23 06:30:51

a/kernel-generic-5.18.6-x86_64-1.txz:  Upgraded.
a/kernel-huge-5.18.6-x86_64-1.txz:  Upgraded.
a/kernel-modules-5.18.6-x86_64-1.txz:  Upgraded.
a/openssl-solibs-1.1.1p-x86_64-1.txz:  Upgraded.
ap/sudo-1.9.11p3-x86_64-1.txz:  Upgraded.
d/kernel-headers-5.18.6-x86-1.txz:  Upgraded.
k/kernel-source-5.18.6-noarch-1.txz:  Upgraded.
l/espeak-ng-1.51.1-x86_64-1.txz:  Upgraded.
l/libidn-1.40-x86_64-1.txz:  Upgraded.
l/mlt-7.8.0-x86_64-1.txz:  Upgraded.
l/openal-soft-1.22.1-x86_64-1.txz:  Upgraded.
l/pulseaudio-16.1-x86_64-1.txz:  Upgraded.
l/speex-1.2.1-x86_64-1.txz:  Upgraded.
l/speexdsp-1.2.1-x86_64-1.txz:  Upgraded.
n/ca-certificates-20220622-noarch-1.txz:  Upgraded.
  This update provides the latest CA certificates to check for the
  authenticity of SSL connections.
n/openssl-1.1.1p-x86_64-1.txz:  Upgraded.
  In addition to the c_rehash shell command injection identified in
  CVE-2022-1292, further circumstances where the c_rehash script does not
  properly sanitise shell metacharacters to prevent command injection were
  found by code review.
  When the CVE-2022-1292 was fixed it was not discovered that there
  are other places in the script where the file names of certificates
  being hashed were possibly passed to a command executed through the shell.
  For more information, see:
    https://www.openssl.org/news/secadv/20220621.txt
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
  (* Security fix *)
x/ibus-table-1.16.9-x86_64-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.