ChangeLog for: 2026-06-09 22:03:28

a/kernel-firmware-20260609_c2a4fe8-noarch-1.txz:  Upgraded.
a/kernel-generic-6.18.35-x86_64-1.txz:  Upgraded.
a/openssl-solibs-3.5.7-x86_64-1.txz:  Upgraded.
d/binutils-2.46.1-x86_64-1.txz:  Upgraded.
  Shared library .so-version bump.
d/kernel-headers-6.18.35-x86-1.txz:  Upgraded.
d/oprofile-1.4.0-x86_64-20.txz:  Rebuilt.
  Recompiled against binutils-2.46.1.
k/kernel-source-6.18.35-noarch-1.txz:  Upgraded.
l/fast_float-8.2.8-x86_64-1.txz:  Upgraded.
l/frei0r-plugins-3.2.1-x86_64-1.txz:  Upgraded.
l/gtkmm3-3.24.11-x86_64-1.txz:  Upgraded.
n/openssl-3.5.7-x86_64-1.txz:  Upgraded.
  This update fixes security issues:
  Fixed heap use-after-free in `PKCS7_verify()`.
  Fixed CMS `AuthEnvelopedData` processing may accept forged messages.
  Fixed unbounded memory growth in the QUIC `PATH_CHALLENGE` handler.
  Fixed NULL pointer dereference in QUIC server initial packet handling.
  For more information, see:
    https://openssl-library.org/news/vulnerabilities/#CVE-2026-45447
    https://openssl-library.org/news/vulnerabilities/#CVE-2026-34182
    https://openssl-library.org/news/vulnerabilities/#CVE-2026-34183
    https://openssl-library.org/news/vulnerabilities/#CVE-2026-42764
    https://www.cve.org/CVERecord?id=CVE-2026-45447
    https://www.cve.org/CVERecord?id=CVE-2026-34182
    https://www.cve.org/CVERecord?id=CVE-2026-34183
    https://www.cve.org/CVERecord?id=CVE-2026-42764
  (* Security fix *)
x/intel-media-driver-26.2.2-x86_64-1.txz:  Upgraded.
isolinux/initrd.img:  Rebuilt.
kernels/*:  Upgraded.
testing/packages/linux-7.0.x/kernel-generic-7.0.12-x86_64-1.txz:  Upgraded.
testing/packages/linux-7.0.x/kernel-headers-7.0.12-x86-1.txz:  Upgraded.
testing/packages/linux-7.0.x/kernel-source-7.0.12-noarch-1.txz:  Upgraded.
usb-and-pxe-installers/usbboot.img:  Rebuilt.