ChangeLog for: 2026-07-23 00:31:41

a/cryptsetup-2.8.7-x86_64-1.txz: Upgraded. a/dialog-1.3_20260721-x86_64-1.txz: Upgraded. ap/linuxdoc-tools-0.9.86-x86_64-3.txz: Rebuilt. Recompiled against perl-5.44.0. ap/texinfo-7.3-x86_64-2.txz: Rebuilt. Recompiled against perl-5.44.0. ap/vim-9.2.0838-x86_64-1.txz: Upgraded. Compiled against perl-5.44.0. d/perl-5.44.0-x86_64-1.txz: Upgraded. Upgraded: DBI-1.651, IO-Socket-SSL-2.099, IO-Tty-1.31, Role-Tiny-2.002005, Template-Toolkit-3.106, URI-5.35. d/pkgconf-3.0.4-x86_64-1.txz: Upgraded. d/subversion-1.14.5-x86_64-5.txz: Rebuilt. Recompiled against perl-5.44.0. l/graphviz-15.1.0-x86_64-2.txz: Rebuilt. Recompiled against perl-5.44.0. l/imagemagick-7.1.2_26-x86_64-2.txz: Rebuilt. Recompiled against perl-5.44.0. l/pilot-link-0.12.5-x86_64-18.txz: Rebuilt. Recompiled against perl-5.44.0. l/python-certifi-2026.7.22-x86_64-1.txz: Upgraded. l/python-charset-normalizer-3.4.9-x86_64-1.txz: Upgraded. l/taglib-2.3.1-x86_64-1.txz: Upgraded. n/bind-9.20.26-x86_64-1.txz: Upgraded. This update fixes security issues: Fix handling of rpz CNAME expansion that returns name too long. Invalid signed wildcard records were being accepted. Fix DNSSEC validation bypass via out-of-zone NSEC Next Field. Correct verification of NSEC3 signer name. Do no assert for some specifics CNAME and DNAME queries. Malformed DNSKEY records could trigger an assertion. Prevent excessive validation work from crafted negative responses. Prevent cache exhaustion under sustained attack. For more information, see: https://kb.isc.org/docs/CVE-2026-11331 https://kb.isc.org/docs/CVE-2026-11721 https://kb.isc.org/docs/CVE-2026-13321 https://kb.isc.org/docs/CVE-2026-10723 https://kb.isc.org/docs/CVE-2026-12617 https://kb.isc.org/docs/CVE-2026-10822 https://kb.isc.org/docs/CVE-2026-11605 https://kb.isc.org/docs/CVE-2026-11622 https://www.cve.org/CVERecord?id=CVE-2026-11331 https://www.cve.org/CVERecord?id=CVE-2026-11721 https://www.cve.org/CVERecord?id=CVE-2026-13321 https://www.cve.org/CVERecord?id=CVE-2026-10723 https://www.cve.org/CVERecord?id=CVE-2026-12617 https://www.cve.org/CVERecord?id=CVE-2026-10822 https://www.cve.org/CVERecord?id=CVE-2026-11605 https://www.cve.org/CVERecord?id=CVE-2026-11622 (* Security fix *) n/epic5-3.0.3-x86_64-4.txz: Rebuilt. Recompiled against perl-5.44.0. n/irssi-1.4.5-x86_64-5.txz: Rebuilt. Recompiled against perl-5.44.0. n/net-snmp-5.9.5.2-x86_64-2.txz: Rebuilt. Recompiled against perl-5.44.0. n/ntp-4.2.8p18-x86_64-9.txz: Rebuilt. Recompiled against perl-5.44.0. n/obexftp-0.24.2-x86_64-17.txz: Rebuilt. Recompiled against perl-5.44.0. n/openldap-2.6.13-x86_64-2.txz: Rebuilt. Recompiled against perl-5.44.0. x/marisa-0.3.1-x86_64-2.txz: Rebuilt. Recompiled against perl-5.44.0. xap/hexchat-2.16.2-x86_64-7.txz: Rebuilt. Recompiled against perl-5.44.0. xap/pidgin-2.14.14-x86_64-4.txz: Rebuilt. Recompiled against perl-5.44.0. xap/rxvt-unicode-9.31-x86_64-5.txz: Rebuilt. Recompiled against perl-5.44.0. xap/vim-gvim-9.2.0838-x86_64-1.txz: Upgraded. Compiled against perl-5.44.0. testing/packages/mozilla-firefox-153.0esr-x86_64-1.txz: Added. testing/packages/mozilla-thunderbird-153.0-x86_64-1.txz: Added.