ChangeLog for: 2026-07-05 22:18:31

a/bcachefs-tools-1.38.8-x86_64-1.txz: Upgraded. a/kernel-firmware-20260703_c95059a-noarch-1.txz: Upgraded. a/kernel-generic-6.18.38-x86_64-1.txz: Upgraded. a/shadow-4.19.4-x86_64-6.txz: Rebuilt. Fixed a bug that was clobbering /etc/login.defs. Thanks to Markus Wiesner. d/kernel-headers-6.18.38-x86-1.txz: Upgraded. d/python-setuptools-83.0.0-x86_64-1.txz: Upgraded. k/kernel-source-6.18.38-noarch-1.txz: Upgraded. kde/libkexiv2-26.04.3-x86_64-1.txz: Upgraded. kde/libkomparediff2-26.04.3-x86_64-1.txz: Upgraded. l/accountsservice-26.27.3-x86_64-1.txz: Upgraded. l/enchant-2.8.18-x86_64-1.txz: Upgraded. l/fluidsynth-2.5.6-x86_64-1.txz: Upgraded. l/isl-0.28-x86_64-1.txz: Upgraded. l/libtiff-4.7.2-x86_64-1.txz: Upgraded. l/python-numpy-2.5.1-x86_64-1.txz: Upgraded. l/shared-mime-info-2.4-x86_64-2.txz: Rebuilt. Reverted. Isn't this stuff pretty much nailed down? Giving it needless "maintenance" is just asking for regressions. Thanks to USUARIONUEVO. n/bluez-5.87-x86_64-1.txz: Upgraded. n/mutt-2.4.1-x86_64-1.txz: Upgraded. This update fixes a security issue: Prevent unsigned int overflow in imap_cmd_step buffer growth. The idata->blen field is unsigned int (32-bit) while the companion variable len is size_t (64-bit on LP64). When a malicious IMAP server sends a response line longer than UINT_MAX bytes without newline, the expression wraps to a small value, causing safe_realloc() to shrink the buffer while len retains its original huge value. The subsequent mutt_socket_readln() then writes far past the shrunken allocation. Fix by changing idata->blen from unsigned int to size_t, matching the type of len and preventing the overflow on all platforms. (* Security fix *) n/postfix-3.11.4-x86_64-4.txz: Rebuilt. Fix LMDB 1.0 compatibility with a different patch. Thanks to teoberi. xap/xaos-4.3.6-x86_64-1.txz: Upgraded. isolinux/initrd.img: Rebuilt. kernels/*: Upgraded. testing/packages/linux-7.1.x/kernel-generic-7.1.3-x86_64-1.txz: Upgraded. testing/packages/linux-7.1.x/kernel-headers-7.1.3-x86-1.txz: Upgraded. testing/packages/linux-7.1.x/kernel-source-7.1.3-noarch-1.txz: Upgraded. usb-and-pxe-installers/usbboot.img: Rebuilt.