ChangeLog for: 2026-07-23 00:31:41
a/cryptsetup-2.8.7-x86_64-1.txz: Upgraded.
a/dialog-1.3_20260721-x86_64-1.txz: Upgraded.
ap/linuxdoc-tools-0.9.86-x86_64-3.txz: Rebuilt.
Recompiled against perl-5.44.0.
ap/texinfo-7.3-x86_64-2.txz: Rebuilt.
Recompiled against perl-5.44.0.
ap/vim-9.2.0838-x86_64-1.txz: Upgraded.
Compiled against perl-5.44.0.
d/perl-5.44.0-x86_64-1.txz: Upgraded.
Upgraded: DBI-1.651, IO-Socket-SSL-2.099, IO-Tty-1.31, Role-Tiny-2.002005,
Template-Toolkit-3.106, URI-5.35.
d/pkgconf-3.0.4-x86_64-1.txz: Upgraded.
d/subversion-1.14.5-x86_64-5.txz: Rebuilt.
Recompiled against perl-5.44.0.
l/graphviz-15.1.0-x86_64-2.txz: Rebuilt.
Recompiled against perl-5.44.0.
l/imagemagick-7.1.2_26-x86_64-2.txz: Rebuilt.
Recompiled against perl-5.44.0.
l/pilot-link-0.12.5-x86_64-18.txz: Rebuilt.
Recompiled against perl-5.44.0.
l/python-certifi-2026.7.22-x86_64-1.txz: Upgraded.
l/python-charset-normalizer-3.4.9-x86_64-1.txz: Upgraded.
l/taglib-2.3.1-x86_64-1.txz: Upgraded.
n/bind-9.20.26-x86_64-1.txz: Upgraded.
This update fixes security issues:
Fix handling of rpz CNAME expansion that returns name too long.
Invalid signed wildcard records were being accepted.
Fix DNSSEC validation bypass via out-of-zone NSEC Next Field.
Correct verification of NSEC3 signer name.
Do no assert for some specifics CNAME and DNAME queries.
Malformed DNSKEY records could trigger an assertion.
Prevent excessive validation work from crafted negative responses.
Prevent cache exhaustion under sustained attack.
For more information, see:
https://kb.isc.org/docs/CVE-2026-11331
https://kb.isc.org/docs/CVE-2026-11721
https://kb.isc.org/docs/CVE-2026-13321
https://kb.isc.org/docs/CVE-2026-10723
https://kb.isc.org/docs/CVE-2026-12617
https://kb.isc.org/docs/CVE-2026-10822
https://kb.isc.org/docs/CVE-2026-11605
https://kb.isc.org/docs/CVE-2026-11622
https://www.cve.org/CVERecord?id=CVE-2026-11331
https://www.cve.org/CVERecord?id=CVE-2026-11721
https://www.cve.org/CVERecord?id=CVE-2026-13321
https://www.cve.org/CVERecord?id=CVE-2026-10723
https://www.cve.org/CVERecord?id=CVE-2026-12617
https://www.cve.org/CVERecord?id=CVE-2026-10822
https://www.cve.org/CVERecord?id=CVE-2026-11605
https://www.cve.org/CVERecord?id=CVE-2026-11622
(* Security fix *)
n/epic5-3.0.3-x86_64-4.txz: Rebuilt.
Recompiled against perl-5.44.0.
n/irssi-1.4.5-x86_64-5.txz: Rebuilt.
Recompiled against perl-5.44.0.
n/net-snmp-5.9.5.2-x86_64-2.txz: Rebuilt.
Recompiled against perl-5.44.0.
n/ntp-4.2.8p18-x86_64-9.txz: Rebuilt.
Recompiled against perl-5.44.0.
n/obexftp-0.24.2-x86_64-17.txz: Rebuilt.
Recompiled against perl-5.44.0.
n/openldap-2.6.13-x86_64-2.txz: Rebuilt.
Recompiled against perl-5.44.0.
x/marisa-0.3.1-x86_64-2.txz: Rebuilt.
Recompiled against perl-5.44.0.
xap/hexchat-2.16.2-x86_64-7.txz: Rebuilt.
Recompiled against perl-5.44.0.
xap/pidgin-2.14.14-x86_64-4.txz: Rebuilt.
Recompiled against perl-5.44.0.
xap/rxvt-unicode-9.31-x86_64-5.txz: Rebuilt.
Recompiled against perl-5.44.0.
xap/vim-gvim-9.2.0838-x86_64-1.txz: Upgraded.
Compiled against perl-5.44.0.
testing/packages/mozilla-firefox-153.0esr-x86_64-1.txz: Added.
testing/packages/mozilla-thunderbird-153.0-x86_64-1.txz: Added.