ChangeLog for: 2026-06-24 23:05:23
a/haveged-1.9.26-x86_64-1.txz: Upgraded.
d/Cython-3.2.6-x86_64-1.txz: Upgraded.
kde/ktextaddons-2.1.0-x86_64-1.txz: Upgraded.
kde/powerdevil-6.7.1-x86_64-2.txz: Rebuilt.
Recompiled against ddcutil-2.2.7.
Thanks to sasha69.
l/ddcutil-2.2.7-x86_64-1.txz: Added.
Needed by powerdevil-6.7.1.
Thanks to sasha69.
l/libass-0.17.5-x86_64-1.txz: Upgraded.
Another small release, this time mainly fixing to out-of-bounds write
memory bugs. As usual with memory write bugs in C, this could in theory
be used for exploits and as such two CVE assignments are pending. In
practice, we do not have knowledge of any actual exploit existing nor
a way to achieve anything but simple DOS. The specific constraints in
these bugs as well as commonly deployed defence mechanisms like ASLR are
believed to make meaningfully exploiting them quite hard.
For more information, see:
https://github.com/libass/libass/security/advisories/GHSA-pjjp-65r7-ppgm
https://github.com/libass/libass/security/advisories/GHSA-5gf7-wjfm-vmvm
(* Security fix *)
l/nodejs-24.18.0-x86_64-1.txz: Upgraded.
l/python-vcs_versioning-2.1.2-x86_64-1.txz: Upgraded.
n/curl-8.21.0-x86_64-1.txz: Upgraded.
x/ibus-m17n-1.4.40-x86_64-1.txz: Upgraded.
xap/geeqie-2.8-x86_64-1.txz: Upgraded.