Security advisories sinc 13/0 release

"Bruce Dubbs" ([email protected] via blfs-dev Mailing List) <[email protected]> Thu, 16 Apr 2026 14:10:11 -0500
Newsgroups gmane.linux.lfs.beyond.devel,gmane.linux.lfs.devel,gmane.linux.lfs.support,gmane.linux.lfs.beyond.support
Message-ID <[email protected]>
This is a multi-part message in MIME format...

------------=_1776366619-1253-24705
Content-Language: en-US
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

In the six weeks since the LFS and BLFS 13.0 releases there have been an
inordinately large number of package security releases.  Below
is a consolidated list of all the packages that have outstanding security
advisories.

The severity annotations are for updates that correct Critical or High issues.
The packages without designation have Medium or Low vulnerability issues.

The list is not complete as there are several more packages that have not
been put into LFS/BLFS yet.  We are working as hard as we can to get them
into the books ASAP.

https://www.linuxfromscratch.org/blfs/advisories/consolidated.html

I recommend updating your systems to resolve (at least) the Critical and
High rated vulnerabilities as soon as you can.

Note that several packages have had multiple security releases in the
last six weeks.  For those packages, only the most recent release is
needed.

   -- Bruce

                             Severity
bind-9.20.20
cURL-8.19.0
exiv2-0.28.8
expat-2.7.5
firefox-140.9.0esr           H
freeRDP-3.24.2               H
   FreeRDP-3.24.0              C
     FreeRDP-3.23.0             H
freetype-2.14.3              H
   freetype-2.14.2
fuse-3.18.2                  H
giflib-6.1.2                 H
glib-2.86.5                  H
glibc-2.43                   H
gst-plugins-base,            H
gst-plugins-bad,             H
gst-plugins-good 1.28.2      H
libarchive-3.8.7             H
libcap-2.78
libde265-1.0.18              H
libexif-0.6.26               H
libinput-1.31.1              H
libpng-1.6.57
   libpng-1.6.56              H
libraw-0.22.1                C
libxml2-2.15.2
nfs-utils-2.8.6
nghttp2-1.68.1               H
node.js-24.14.1              H
openSSH-10.3p1               H
openSSL-3.6.2
perl-5.42.2                  C
pytest-9.0.3
python-3.14.4                C
   Python-3.14.3              H
qtWebEngine-6.11.0           C
requests-2.33.0
spidermonkey / FF-140.9.0esr H
systemd-259.5
thunderbird-140.9.0esr       H
util-Linux-2.42
vim-9.2.0340                 H
   9.2.0272                   C
webKitGTK-2.52.0             C
wireshark-4.6.4
xml-Parser-2.54              C
xdg-dbus-proxy-0.1.7         H
xdg-desktop-portal-1.20.4
xorg-Server-21.1.22          H
xwayland-24.1.10             H
xz-5.8.3                     C



------------=_1776366619-1253-24705
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-dev
Unsubscribe: See the above information page
------------=_1776366619-1253-24705--