From 4af98fab13c06904bfffaca0ddb81e188d6d3302 Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Wed, 3 Sep 2025 15:56:10 +0200 Subject: [PATCH] changelog: Add entries Signed-off-by: Krzesimir Nowak --- .../security/2025-09-03-weekly-updates.md | 6 ++++ .../updates/2025-09-03-weekly-updates.md | 29 +++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 changelog/security/2025-09-03-weekly-updates.md create mode 100644 changelog/updates/2025-09-03-weekly-updates.md diff --git a/changelog/security/2025-09-03-weekly-updates.md b/changelog/security/2025-09-03-weekly-updates.md new file mode 100644 index 0000000000..1701a66987 --- /dev/null +++ b/changelog/security/2025-09-03-weekly-updates.md @@ -0,0 +1,6 @@ +- vim ([CVE-2025-53905](https://www.cve.org/CVERecord?id=CVE-2025-53905), [CVE-2025-53906](https://www.cve.org/CVERecord?id=CVE-2025-53906), [CVE-2025-9390](https://www.cve.org/CVERecord?id=CVE-2025-9390)) +- go ([CVE-2025-47906](https://www.cve.org/CVERecord?id=CVE-2025-47906), [CVE-2025-47907](https://www.cve.org/CVERecord?id=CVE-2025-47907)) +- glib ([CVE-2025-7039](https://www.cve.org/CVERecord?id=CVE-2025-7039)) +- gnutls ([CVE-2025-32988](https://www.cve.org/CVERecord?id=CVE-2025-32988), [CVE-2025-32989](https://www.cve.org/CVERecord?id=CVE-2025-32989), [CVE-2025-32990](https://www.cve.org/CVERecord?id=CVE-2025-32990), [CVE-2025-6395](https://www.cve.org/CVERecord?id=CVE-2025-6395)) +- iperf ([CVE-2025-54349](https://www.cve.org/CVERecord?id=CVE-2025-54349), [CVE-2025-54350](https://www.cve.org/CVERecord?id=CVE-2025-54350), [CVE-2025-54351](https://www.cve.org/CVERecord?id=CVE-2025-54351)) +- glibc ([CVE-2025-8058](https://www.cve.org/CVERecord?id=CVE-2025-8058)) diff --git a/changelog/updates/2025-09-03-weekly-updates.md b/changelog/updates/2025-09-03-weekly-updates.md new file mode 100644 index 0000000000..368214c2ff --- /dev/null +++ b/changelog/updates/2025-09-03-weekly-updates.md @@ -0,0 +1,29 @@ +- SDK: gnu-efi ([4.0.2](https://github.com/ncroxon/gnu-efi/releases/tag/4.0.2)) +- SDK: go ([1.24.6](https://go.dev/doc/devel/release#go1.24.minor)) +- SDK: rust ([1.88.0](https://blog.rust-lang.org/2025/06/26/Rust-1.88.0/)) +- SDK: sbsigntools ([0.9.5](https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/commit/?h=v0.9.5&id=9cfca9fe7aa7a8e29b92fe33ce8433e212c9a8ba)) +- base, dev: azure-vm-utils ([0.7.0](https://github.com/Azure/azure-vm-utils/releases/tag/v0.7.0)) +- base, dev: cryptsetup ([2.8.0](https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.8.0/docs/v2.8.0-ReleaseNotes)) +- base, dev: curl ([8.15.0](https://curl.se/ch/8.15.0.html)) +- base, dev: e2fsprogs ([1.47.3](https://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.47.3)) +- base, dev: glib ([2.84.4](https://gitlab.gnome.org/GNOME/glib/-/releases/2.84.4)) +- base, dev: gnutls ([3.8.10](https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html)) +- base, dev: kmod ([34.2](https://lwn.net/Articles/1011365/)) +- base, dev: libsodium ([1.0.20_p20250606](https://raw.githubusercontent.com/jedisct1/libsodium/7e024fbf096c84bef866b21f521c516591908bef/ChangeLog)) +- base, dev: lsof ([4.99.5](https://github.com/lsof-org/lsof/releases/tag/4.99.5)) +- base, dev: ncurses ([6.5_p20250531](https://invisible-island.net/ncurses/NEWS.html#t20250531)) +- base, dev: nettle ([3.10.2](https://git.lysator.liu.se/nettle/nettle/-/raw/nettle_3.10.2_release_20250626/ChangeLog)) +- base, dev: nvidia-drivers-service (arm64) (570.172.08) +- base, dev: openssl ([3.4.2](https://github.com/openssl/openssl/releases/tag/openssl-3.4.2)) +- base, dev: pciutils ([3.14.0](https://git.kernel.org/pub/scm/utils/pciutils/pciutils.git/plain/ChangeLog?h=v3.14.0)) +- base, dev: pkgconf ([2.5.1](https://raw.githubusercontent.com/pkgconf/pkgconf/refs/tags/pkgconf-2.5.1/NEWS) (includes [2.5.0](https://raw.githubusercontent.com/pkgconf/pkgconf/refs/tags/pkgconf-2.5.0/NEWS))) +- base, dev: selinux ([2.20250213](https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20250213)) +- base, dev: sudo ([1.9.17_p2](https://github.com/sudo-project/sudo/releases/tag/v1.9.17p2)) +- base, dev: vim ([9.1.1652](https://github.com/vim/vim/commits/v9.1.1652/)) +- dev: gnuconfig ([20250710](https://cgit.git.savannah.gnu.org/cgit/config.git/log/?id=a2287c3041a3f2a204eb942e09c015eab00dc7dd)) +- dev: iperf ([3.19.1](https://github.com/esnet/iperf/releases/tag/3.19.1)) +- sysext-incus, sysext-podman, vmware: fuse ([3.17.3](https://raw.githubusercontent.com/libfuse/libfuse/refs/tags/fuse-3.17.3/ChangeLog.rst)) +- sysext-incus: cowsql ([1.15.9](https://github.com/cowsql/cowsql/commits/v1.15.9/)) +- sysext-nvidia-drivers-570, sysext-nvidia-drivers-570-open: nvidia-drivers (570.181) +- sysext-python: rich ([14.1.0](https://github.com/Textualize/rich/releases/tag/v14.1.0)) +- sysext-python: truststore ([0.10.4](https://raw.githubusercontent.com/sethmlarson/truststore/refs/tags/v0.10.4/CHANGELOG.md))