ChangeLog for: 2025-04-04 21:30:41
a/xz-5.8.1-x86_64-1.txz: Upgraded.
This update fixes a security issue:
Multithreaded .xz decoder (lzma_stream_decoder_mt()):
Fix a bug that could at least result in a crash with invalid input.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2025-31115
(* Security fix *)
ap/lxc-6.0.4-x86_64-1.txz: Upgraded.
d/google-go-lang-1.24.2-x86_64-1.txz: Upgraded.
d/meson-1.7.2-x86_64-1.txz: Upgraded.
kde/qcoro-0.12.0-x86_64-1.txz: Upgraded.
l/glib2-2.84.1-x86_64-1.txz: Upgraded.
x/libsfdo-0.1.4-x86_64-1.txz: Upgraded.
xap/mozilla-thunderbird-128.9.1esr-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/128.9.1esr/releasenotes/
xap/mpv-0.40.0-x86_64-2.txz: Rebuilt.
[PATCH] clipboard-wayland: prevent reading from hung up fd.
Thanks to gmgf.