ChangeLog for: 2023-03-20 19:26:23

a/coreutils-9.2-x86_64-1.txz: Upgraded. a/elilo-3.16-x86_64-14.txz: Rebuilt. eliloconfig: check first for /sys/firmware/efi/efivars, and then check for the older /sys/firmware/efi/vars directory. We should be able to install an EFI menu entry if either one is present. Thanks to AlleyTrotter. a/xz-5.4.2-x86_64-1.txz: Upgraded. ap/mpg123-1.31.3-x86_64-1.txz: Upgraded. ap/squashfs-tools-4.6-x86_64-1.txz: Upgraded. ap/vim-9.0.1418-x86_64-1.txz: Upgraded. Fixed security issues: NULL pointer dereference issue in utfc_ptr2len. Incorrect Calculation of Buffer Size. Heap-based Buffer Overflow. Thanks to marav for the heads-up. For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-1264 https://www.cve.org/CVERecord?id=CVE-2023-1175 https://www.cve.org/CVERecord?id=CVE-2023-1170 (* Security fix *) l/imagemagick-7.1.1_4-x86_64-1.txz: Upgraded. l/libsigc++-2.12.0-x86_64-1.txz: Upgraded. l/netpbm-11.01.01-x86_64-1.txz: Upgraded. n/curl-8.0.1-x86_64-1.txz: Upgraded. This update fixes security issues: SSH connection too eager reuse still. HSTS double-free. GSS delegation too eager connection re-use. FTP too eager connection reuse. SFTP path ~ resolving discrepancy. TELNET option IAC injection. For more information, see: https://curl.se/docs/CVE-2023-27538.html https://curl.se/docs/CVE-2023-27537.html https://curl.se/docs/CVE-2023-27536.html https://curl.se/docs/CVE-2023-27535.html https://curl.se/docs/CVE-2023-27534.html https://curl.se/docs/CVE-2023-27533.html https://www.cve.org/CVERecord?id=CVE-2023-27538 https://www.cve.org/CVERecord?id=CVE-2023-27537 https://www.cve.org/CVERecord?id=CVE-2023-27536 https://www.cve.org/CVERecord?id=CVE-2023-27535 https://www.cve.org/CVERecord?id=CVE-2023-27534 https://www.cve.org/CVERecord?id=CVE-2023-27533 (* Security fix *) x/fcitx5-gtk-5.0.23-x86_64-1.txz: Upgraded. x/libva-utils-2.18.0-x86_64-1.txz: Upgraded. xap/vim-gvim-9.0.1418-x86_64-1.txz: Upgraded. xfce/xfce4-screensaver-4.18.0-x86_64-1.txz: Upgraded.