ChangeLog for: 2026-04-10 00:10:26
a/openssl-solibs-3.5.6-x86_64-2.txz: Rebuilt.
ap/htop-3.5.0-x86_64-1.txz: Upgraded.
ap/joe-4.7-x86_64-1.txz: Upgraded.
ap/xorriso-1.5.8.pl01-x86_64-1.txz: Upgraded.
l/frei0r-plugins-3.0.0-x86_64-1.txz: Upgraded.
l/libcap-ng-0.9.3-x86_64-1.txz: Upgraded.
l/libpng-1.6.57-x86_64-1.txz: Upgraded.
Fixed a medium severity security issue:
Use-after-free in `png_set_PLTE`, `png_set_tRNS` and `png_set_hIST`
leading to corrupted chunk data and potential heap information disclosure.
Also hardened the append-style setters (`png_set_text`, `png_set_sPLT`,
`png_set_unknown_chunks`) against a theoretical variant of the same
aliasing pattern.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2026-34757
(* Security fix *)
l/parted-3.7-x86_64-1.txz: Upgraded.
l/pipewire-1.6.3-x86_64-1.txz: Upgraded.
l/python-lxml-6.0.3-x86_64-1.txz: Upgraded.
l/qt6-6.10.3_20260330_6417867c-x86_64-3.txz: Rebuilt.
[PATCH] QDBusMetaObject: ensure custom types are normalized.
Thanks to Willy Sudiarto Raharjo.
n/openssl-3.5.6-x86_64-2.txz: Rebuilt.
Rebuilt with option enable-ktls.
Thanks to qunying.
n/php-8.4.20-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.4.20
n/stunnel-5.78-x86_64-1.txz: Upgraded.
x/xdg-desktop-portal-1.20.4-x86_64-1.txz: Upgraded.
x/xdg-user-dirs-0.20-x86_64-1.txz: Upgraded.
testing/packages/php-8.5.5-x86_64-1.txz: Upgraded.
This is a bugfix release.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.5.5