ChangeLog for: 2025-09-10 01:30:20
a/kernel-firmware-20250909_4573c02-noarch-1.txz: Upgraded.
a/kernel-generic-6.12.46-x86_64-1.txz: Upgraded.
a/lvm2-2.03.35-x86_64-1.txz: Upgraded.
a/sysvinit-3.15-x86_64-1.txz: Upgraded.
d/kernel-headers-6.12.46-x86-1.txz: Upgraded.
k/kernel-source-6.12.46-noarch-1.txz: Upgraded.
l/gtk4-4.20.1-x86_64-1.txz: Upgraded.
l/libssh-0.11.3-x86_64-1.txz: Upgraded.
This update fixes security issues:
Fix NULL pointer dereference after allocation failure.
Fix memory leak of ephemeral key pair during repeated wrong KEX.
Potential UAF when send() fails during key exchange.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2025-8114
https://www.cve.org/CVERecord?id=CVE-2025-8277
(* Security fix *)
l/python-trove-classifiers-2025.9.9.12-x86_64-1.txz: Upgraded.
n/p11-kit-0.25.6-x86_64-1.txz: Upgraded.
x/mesa-25.2.2-x86_64-2.txz: Rebuilt.
[PATCH] zink: toggle ctx->has_swapchain when flushing clears.
Thanks to fulalas.
x/xterm-402-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
testing/packages/linux-6.16.x/kernel-generic-6.16.6-x86_64-1.txz: Upgraded.
testing/packages/linux-6.16.x/kernel-headers-6.16.6-x86-1.txz: Upgraded.
testing/packages/linux-6.16.x/kernel-source-6.16.6-noarch-1.txz: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.