ChangeLog for: 2015-09-02 00:29:22

a/aaa_elflibs-14.2-x86_64-2.txz: Rebuilt. a/cryptsetup-1.6.7-x86_64-1.txz: Upgraded. a/lvm2-2.02.129-x86_64-1.txz: Upgraded. ap/lxc-1.1.3-x86_64-1.txz: Upgraded. d/git-2.5.1-x86_64-1.txz: Upgraded. l/dconf-editor-3.16.1-x86_64-1.txz: Added. l/gdk-pixbuf2-2.31.7-x86_64-1.txz: Upgraded. Gustavo Grieco discovered a heap overflow in the processing of BMP images which may result in the execution of arbitrary code if a malformed image is opened. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491 (* Security fix *) n/ModemManager-1.4.10-x86_64-1.txz: Upgraded. n/NetworkManager-1.0.6-x86_64-1.txz: Upgraded. n/openssh-7.1p1-x86_64-1.txz: Upgraded. x/libvdpau-1.1.1-x86_64-1.txz: Upgraded. libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files. This release uses the secure_getenv() function to fix these problems. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5198 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5199 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5200 (* Security fix *) x/mesa-10.6.5-x86_64-1.txz: Upgraded. xap/network-manager-applet-1.0.6-x86_64-1.txz: Upgraded.