ChangeLog for: 2025-11-21 00:56:06
l/gtk4-4.20.3-x86_64-1.txz: Upgraded.
l/pycairo-1.29.0-x86_64-1.txz: Upgraded.
l/python-lxml-6.0.2-x86_64-1.txz: Upgraded.
l/python-setuptools-gettext-0.1.16-x86_64-1.txz: Upgraded.
l/qt6-6.10.1_20251116_56657e03-x86_64-1.txz: Upgraded.
n/gnutls-3.8.11-x86_64-1.txz: Upgraded.
This update fixes a security issue:
libgnutls: Fix stack overwrite in gnutls_pkcs11_token_init.
Reported by Luigino Camastra from Aisle Research.
Upstream says this is low severity because the PKCS#11 standard defines a
size limit of 32 characters, and therefore it's the application's fault if
it doesn't check that and reject a longer label. I'm not buying that.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2025-9820
(* Security fix *)