Re: Security advisories sinc 13/0 release

This is a multi-part message in MIME format...

------------=_1776467280-1253-24969
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Thu, Apr 16, 2026 at 02:10:11PM -0500, Bruce Dubbs wrote:
> In the six weeks since the LFS and BLFS 13.0 releases there have been an
> inordinately large number of package security releases.  Below
> is a consolidated list of all the packages that have outstanding security
> advisories.
> 
> The severity annotations are for updates that correct Critical or High issues.
> The packages without designation have Medium or Low vulnerability issues.
> 
> The list is not complete as there are several more packages that have not
> been put into LFS/BLFS yet.  We are working as hard as we can to get them
> into the books ASAP.
> 
> https://www.linuxfromscratch.org/blfs/advisories/consolidated.html
> 
> I recommend updating your systems to resolve (at least) the Critical and
> High rated vulnerabilities as soon as you can.
> 
> Note that several packages have had multiple security releases in the
> last six weeks.  For those packages, only the most recent release is
> needed.
> 
>   -- Bruce
> 
>                             Severity
> bind-9.20.20
> cURL-8.19.0
> exiv2-0.28.8
> expat-2.7.5
> firefox-140.9.0esr           H
> freeRDP-3.24.2               H
>   FreeRDP-3.24.0              C
>     FreeRDP-3.23.0             H
> freetype-2.14.3              H
>   freetype-2.14.2
> fuse-3.18.2                  H
> giflib-6.1.2                 H
> glib-2.86.5                  H
> glibc-2.43                   H
> gst-plugins-base,            H
> gst-plugins-bad,             H
> gst-plugins-good 1.28.2      H
> libarchive-3.8.7             H
> libcap-2.78
> libde265-1.0.18              H
> libexif-0.6.26               H
> libinput-1.31.1              H
> libpng-1.6.57
>   libpng-1.6.56              H
> libraw-0.22.1                C
> libxml2-2.15.2
> nfs-utils-2.8.6
> nghttp2-1.68.1               H
> node.js-24.14.1              H
> openSSH-10.3p1               H
> openSSL-3.6.2
> perl-5.42.2                  C
> pytest-9.0.3
> python-3.14.4                C
>   Python-3.14.3              H
> qtWebEngine-6.11.0           C
> requests-2.33.0
> spidermonkey / FF-140.9.0esr H
> systemd-259.5
> thunderbird-140.9.0esr       H
> util-Linux-2.42
> vim-9.2.0340                 H
>   9.2.0272                   C
> webKitGTK-2.52.0             C
> wireshark-4.6.4
> xml-Parser-2.54              C
> xdg-dbus-proxy-0.1.7         H
> xdg-desktop-portal-1.20.4
> xorg-Server-21.1.22          H
> xwayland-24.1.10             H
> xz-5.8.3                     C

Hi Bruce,

Thank you for the list of updates.

Regards
Pierre


------------=_1776467280-1253-24969
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page

------------=_1776467280-1253-24969--