ChangeLog for: 2026-04-16 23:36:54
l/elfutils-0.195-x86_64-1.txz: Upgraded.
l/libpng-1.6.58-x86_64-1.txz: Upgraded.
Fixed a regression introduced in version 1.6.56 that caused `png_get_PLTE`
to return stale palette data after applying gamma and background transforms
in-place.
l/libxml2-2.15.3-x86_64-1.txz: Upgraded.
This update fixes security issues:
parser: Pass userData to SAX text callbacks in xmlParseReference
(type-confusion).
entities: copy children in xmlCopyEntity.
c14n: Fix Type confusion in xmlC14NProcessAttrsAxis.
python: Do not decref string after adding to the list
(double-free / use-after-free).
c14n: Reuse tmp_str, xmlStrcat reallocates *cur (double-free).
(* Security fix *)
n/ngtcp2-1.22.1-x86_64-1.txz: Upgraded.
testing/packages/rust-1.95.0-x86_64-1.txz: Upgraded.