ChangeLog for: 2026-06-04 02:22:28

a/bash-5.3.012-x86_64-1.txz:  Upgraded.
a/elogind-255.26-x86_64-1.txz:  Upgraded.
a/elogind-255.27-x86_64-1.txz:  Upgraded.
a/hwdata-0.408-noarch-1.txz:  Upgraded.
d/llvm-22.1.7-x86_64-1.txz:  Upgraded.
l/abseil-cpp-20260526.0-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
l/fast_float-8.2.6-x86_64-1.txz:  Upgraded.
l/graphite2-1.3.15-x86_64-2.txz:  Rebuilt.
  This is the first case I've observed where cmake installs an .la file.
  Get rid of it.
  Thanks to jtsn.
l/harfbuzz-14.2.1-x86_64-1.txz:  Upgraded.
l/libclc-22.1.7-x86_64-1.txz:  Upgraded.
l/ocl-icd-2.3.5-x86_64-1.txz:  Upgraded.
l/protobuf-35.0-x86_64-2.txz:  Rebuilt.
  Recompiled against abseil-cpp-20260526.0.
l/python-hatchling-1.30.1-x86_64-1.txz:  Upgraded.
l/python-idna-3.18-x86_64-1.txz:  Upgraded.
l/python-snowballstemmer-3.1.1-x86_64-1.txz:  Upgraded.
l/python-trove-classifiers-2026.6.1.19-x86_64-1.txz:  Upgraded.
l/qt6-6.11.1_20260508_bfde7b89-x86_64-1.txz:  Upgraded.
  Thanks to alienBOB for the 32-bit fixes!
  Compiled against abseil-cpp-20260526.0.
n/httpd-2.4.67-x86_64-2.txz:  Rebuilt.
  This update fixes "HTTP/2 Bomb", a resource exhaustion denial-of-service
  attack against HTTP/2.
  For more information, see:
    https://seclists.org/oss-sec/2026/q2/790
    https://www.cve.org/CVERecord?id=CVE-2026-49975
  (* Security fix *)
n/mosh-1.4.0-x86_64-21.txz:  Rebuilt.
  Recompiled against abseil-cpp-20260526.0.
n/net-tools-20181103_0eebece-x86_64-4.txz:  Rebuilt.
  This update fixes a security issue:
  interface.c: Stack-based Buffer Overflow in get_name().
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2025-46836
  (* Security fix *)
n/proftpd-1.3.9b-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  Additional fixes for SQL injection, notably for handling `%{env:...}`
  and `%{note:...}` variables.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-42167
  (* Security fix *)
x/fontconfig-2.18.1-x86_64-1.txz:  Upgraded.
x/intel-media-driver-26.2.1-x86_64-1.txz:  Upgraded.
x/mesa-26.1.2-x86_64-1.txz:  Upgraded.
x/xorg-server-21.1.23-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Font Alias Stack-based Buffer Overflow.
  XSYNC Use-After-Free in miSyncDestroyFence().
  XKB Key Types Stack-based Buffer Overflow.
  XKB SetMap Request Stack-based Buffer Overflow.
  XSYNC Use-After-Free in FreeCounter().
  XSYNC Use-After-Free in SyncChangeCounter().
  GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write.
  CreateSaverWindow Use-After-Free Information Disclosure.
  DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write.
  For more information, see:
    https://lists.x.org/archives/xorg/2026-June/062239.html
    Zero Day Initiative identifiers:
    ZDI-CAN-30136
    ZDI-CAN-30159
    ZDI-CAN-30160
    ZDI-CAN-30161
    ZDI-CAN-30163
    ZDI-CAN-30164
    ZDI-CAN-30165
    ZDI-CAN-30168
  (* Security fix *)
x/xorg-server-xephyr-21.1.23-x86_64-1.txz:  Upgraded.
x/xorg-server-xnest-21.1.23-x86_64-1.txz:  Upgraded.
x/xorg-server-xvfb-21.1.23-x86_64-1.txz:  Upgraded.
x/xorg-server-xwayland-24.1.12-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Font Alias Stack-based Buffer Overflow.
  XSYNC Use-After-Free in miSyncDestroyFence().
  XKB Key Types Stack-based Buffer Overflow.
  XKB SetMap Request Stack-based Buffer Overflow.
  XSYNC Use-After-Free in FreeCounter().
  XSYNC Use-After-Free in SyncChangeCounter().
  GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write.
  CreateSaverWindow Use-After-Free Information Disclosure.
  For more information, see:
    https://lists.x.org/archives/xorg/2026-June/062239.html
    Zero Day Initiative identifiers:
    ZDI-CAN-30136
    ZDI-CAN-30159
    ZDI-CAN-30160
    ZDI-CAN-30161
    ZDI-CAN-30163
    ZDI-CAN-30164
    ZDI-CAN-30165
    ZDI-CAN-30168
  (* Security fix *)
extra/tigervnc/tigervnc-1.16.2-x86_64-3.txz:  Rebuilt.
  Patched with fixes for the following xorg-server security issues:
  Font Alias Stack-based Buffer Overflow.
  XSYNC Use-After-Free in miSyncDestroyFence().
  XKB Key Types Stack-based Buffer Overflow.
  XKB SetMap Request Stack-based Buffer Overflow.
  XSYNC Use-After-Free in FreeCounter().
  XSYNC Use-After-Free in SyncChangeCounter().
  GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write.
  CreateSaverWindow Use-After-Free Information Disclosure.
  DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write.
  For more information, see:
    https://lists.x.org/archives/xorg/2026-June/062239.html
    Zero Day Initiative identifiers:
    ZDI-CAN-30136
    ZDI-CAN-30159
    ZDI-CAN-30160
    ZDI-CAN-30161
    ZDI-CAN-30163
    ZDI-CAN-30164
    ZDI-CAN-30165
    ZDI-CAN-30168
  (* Security fix *)