From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: DKIM-Filter: OpenDKIM Filter v2.11.0 mskdc-relay.altlinux.org E6BA660147 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=altlinux.org; s=relay-alt2025; t=1756685893; bh=fjuve3c5sW9ATeIilFJ3uPIuk6FieEHUGVX2wt8c2Po=; h=Date:From:To:Subject:From; b=WQmHlwfamfeyO+tOHfRzI5H8unfheDdPkAgNGJoyYM8dsK7LGMJIS3PMiFGFJSzgw gkRQm77/e7FEJMxh4Tjt4VTb3WW4Vv5T8vRH5omBYaJLlvUXcmkd9sHN+xjvXoLYjW QLtNVUltrsDG21BZDl+YRFbwmwan2L8MVkP4enp8= Date: Mon, 1 Sep 2025 00:18:13 +0000 From: QA Team Robot To: sisyphus-cybertalk@lists.altlinux.org Message-ID: Mail-Followup-To: sisyphus-cybertalk@lists.altlinux.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Subject: [cyber] I: Sisyphus-20250901 packages: +1! +21 (20554) X-BeenThere: sisyphus-cybertalk@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: devel@lists.altlinux.org List-Id: ALT Linux Sisyphus cybertalk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Sep 2025 00:18:14 -0000 Archived-At: List-Archive: 1 ADDED package scx-scheds - sched_ext schedulers and tools [59M] * Thu Aug 28 2025 Vitaly Chikunov 1.0.15-alt1 - Experimental import v1.0.15 (2025-08-13). 21 UPDATED packages alterator-sysconfig - alterator module for basic system settings * Sun Aug 31 2025 Anton Midyukov 1.3.26-alt1 - alterator-sysconfig-functions: do not use $destdir in write_gnome_kbd * Thu Jul 31 2025 Anton Midyukov 1.3.25-alt1 bup - Very efficient backup system based on the git packfile format * Sun Aug 31 2025 Andrey Cherepanov 0.33.9-alt1 - New version. * Tue Aug 19 2025 Andrey Cherepanov 0.33.8-alt1 exiv2 - Command line tool to access EXIF data in image files [45M] * Sun Aug 31 2025 Yuri N. Sedunov 0.28.7-alt1 - 0.28.7 * Sat Aug 30 2025 Yuri N. Sedunov 0.28.6-alt1 firefox-esr - The Mozilla Firefox project is a redesign of Mozilla's browser [639M] * Sat Aug 30 2025 Andrey Cherepanov 140.2.0-alt2 - Build with gcc and bfd linker on i586. * Mon Aug 25 2025 Pavel Vasenkov 140.2.0-alt1 - New ESR version. - Security fixes: + CVE-2025-9179 Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180 Same-origin policy bypass in the Graphics: Canvas2D component + CVE-2025-9181 Uninitialized memory in the JavaScript Engine component + CVE-2025-9182 Denial-of-service due to out-of-memory in the Graphics: WebRender component + CVE-2025-9183 Spoofing issue in the Address Bar component + CVE-2025-9184 Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 + CVE-2025-9185 Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR * Sat Jul 26 2025 Pavel Vasenkov 128.13.0-alt1 - New ESR version. - Security fixes: + CVE-2025-8027 JavaScript engine only wrote partial return value to stack + CVE-2025-8028 Large branch table could lead to truncated instruction + CVE-2025-8029 javascript: URLs executed on object and embed tags + CVE-2025-8030 Potential user-assisted code execution in "Copy as cURL" command + CVE-2025-8031 Incorrect URL stripping in CSP reports + CVE-2025-8032 XSLT documents could bypass CSP + CVE-2025-8033 Incorrect JavaScript state machine for generators + CVE-2025-8034 Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR + CVE-2025-8035 Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and * Sun Jul 06 2025 Pavel Vasenkov 128.12.0-alt1 - New ESR version. - Security fixes: + CVE-2025-6424 Use-after-free in FontFaceSet + CVE-2025-6425 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID + CVE-2025-6426 No warning when opening executable terminal files on macOS + CVE-2025-6429 Incorrect parsing of URLs could have allowed embedding of youtube.com + CVE-2025-6430 Content-Disposition header ignored when a file is included in an embed or object tag * Wed Jun 18 2025 Pavel Vasenkov 128.11.0-alt1 - New ESR version. - Exclude i586 arch due to idle time limit exceeded - Security fixes: + CVE-2025-5283 Double-free in libvpx encoder + CVE-2025-5263 Error handling for script execution was incorrectly isolated from web content + CVE-2025-5264 Potential local code execution in "Copy as cURL command" + CVE-2025-5265 Potential local code execution in "Copy as cURL command" + CVE-2025-5266 Script element events leaked cross-origin resource status + CVE-2025-5267 Clickjacking vulnerability could have led to leaking saved payment card details + CVE-2025-5268 Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 + CVE-2025-5269 Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 * Wed May 21 2025 Pavel Vasenkov 128.10.1-alt1 geoclue2 - The Geoinformation Service * Sun Aug 31 2025 Yuri N. Sedunov 2.8.0-alt1 - 2.8.0 - removed separate config for beacondb.net * Fri Jan 17 2025 Yuri N. Sedunov 2.7.2-alt2 glaze-devel - Extremely fast, in memory, JSON and interface library for modern C++ * Sun Aug 31 2025 Kirill Unitsaev 5.6.1-alt1 - new version 5.6.1 (with rpmrb script) * Thu Jul 17 2025 Kirill Unitsaev 5.5.4-alt1 gnome-maps - Maps is a map application for GNOME * Sun Aug 31 2025 Yuri N. Sedunov 48.7-alt1 - 48.7 * Mon Aug 04 2025 Yuri N. Sedunov 48.6-alt1 gtk4-layer-shell - Library to create components for Wayland using the Layer Shell and GTK4 * Sun Aug 31 2025 Kirill Unitsaev 1.2.0-alt1 - new version 1.2.0 (with rpmrb script) * Sun Mar 30 2025 Kirill Unitsaev 1.1.1-alt1 hypridle - Hyprland's idle daemon * Sun Aug 31 2025 Kirill Unitsaev 0.1.7-alt1 - new version 0.1.7 (with rpmrb script) * Sat Mar 29 2025 Kirill Unitsaev 0.1.6-alt1 icon-theme-adwaita-colors - Adwaita Colors Icon Theme * Sun Aug 31 2025 Yuri N. Sedunov 2.5-alt1 - 2.5 * Wed Jun 25 2025 Yuri N. Sedunov 2.4.2-alt1 libaquamarine - Is a very light linux rendering backend library * Sun Aug 31 2025 Kirill Unitsaev 0.9.4-alt1 - new version 0.9.4 (with rpmrb script) * Thu Jul 17 2025 Kirill Unitsaev 0.9.2-alt1 libgom - A GObject to SQLite object mapper * Sun Aug 31 2025 Yuri N. Sedunov 0.5.4-alt1 - 0.5.4 * Sun Aug 04 2024 Yuri N. Sedunov 0.5.3-alt1 libhyprutils - Hyprland utilities library * Sun Aug 31 2025 Kirill Unitsaev 0.8.4-alt1 - new version 0.8.4 (with rpmrb script) * Thu Jul 31 2025 Kirill Unitsaev 0.8.2-alt1 libiscsi - iSCSI client library * Sat Aug 30 2025 Vitaly Chikunov 1.20.3-alt1 - Update to 1.20.3 (2025-07-15). * Fri Jun 13 2025 Vitaly Chikunov 1.20.2-alt1 libpanel - Library with GTK4 widgets for IDE-like applications * Sun Aug 31 2025 Yuri N. Sedunov 1.10.1-alt1 - 1.10.1 * Sun Mar 16 2025 Yuri N. Sedunov 1.10.0-alt1 niri - A scrollable-tiling Wayland compositor [34M] * Sun Aug 31 2025 Kirill Unitsaev 25.08-alt1 - new version 25.08 (with rpmrb script) * Wed May 28 2025 Kirill Unitsaev 25.05.1-alt1 plasma-addon-kwin-minimize2tray - Hide windows to the system tray, similar to KDocker but in the form of a KWin Script that work * Sun Aug 31 2025 Aleksandr Shamaraev 20250830-alt1 - update to git.33eb2f24: + feat: auto hide application when minimized * Fri Aug 29 2025 Aleksandr Shamaraev 20250826-alt1 python3-module-envstack - Stacked environment variable management system * Sun Aug 31 2025 Aleksandr Shamaraev 0.9.2-alt1 - 0.9.1 -> 0.9.2 * Tue Aug 26 2025 Aleksandr Shamaraev 0.9.1-alt1 time-tracker - Time Tracker for GNOME * Sun Aug 31 2025 Yuri N. Sedunov 2.1.7-alt1 - 2.1.7 * Thu Aug 14 2025 Yuri N. Sedunov 2.1.6-alt1 ubdsrv - ublk: userspace block device driver * Sun Aug 31 2025 Vitaly Chikunov 1.6-alt1 - Update to v1.6 (2025-08-19). * Fri Jun 13 2025 Vitaly Chikunov 1.5-alt2 yt-dlp - A tool for downloading from video services for offline watching * Sun Aug 31 2025 Cronbuild Service 2025.08.27-alt1 - Updated to 2025.08.27. * Wed Aug 27 2025 Cronbuild Service 2025.08.22-alt1 Total 20554 source packages.