ChangeLog for: 2026-01-08 00:04:37
l/freecell-solver-6.16.0-x86_64-1.txz: Upgraded.
l/pcsc-lite-2.4.1-x86_64-1.txz: Upgraded.
n/curl-8.18.0-x86_64-1.txz: Upgraded.
This update fixes security issues:
libssh key passphrase bypass without agent set.
libssh global known_hosts override.
OpenSSL partial chain store policy bypass.
bearer token leak on cross-protocol redirect.
broken TLS options for threaded LDAPS.
No QUIC certificate pinning with GnuTLS.
For more information, see:
https://curl.se/docs/CVE-2025-15224.html
https://curl.se/docs/CVE-2025-15079.html
https://curl.se/docs/CVE-2025-14819.html
https://curl.se/docs/CVE-2025-14524.html
https://curl.se/docs/CVE-2025-14017.html
https://curl.se/docs/CVE-2025-13034.html
https://www.cve.org/CVERecord?id=CVE-2025-15224
https://www.cve.org/CVERecord?id=CVE-2025-15079
https://www.cve.org/CVERecord?id=CVE-2025-14819
https://www.cve.org/CVERecord?id=CVE-2025-14524
https://www.cve.org/CVERecord?id=CVE-2025-14017
https://www.cve.org/CVERecord?id=CVE-2025-13034
(* Security fix *)