diff --git a/CHANGES b/CHANGES index 97fd0b3db8..ce58f96059 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,59 @@ +2025.08.1, released October 11, 2025 + + Important / security related fixes: + + - atop: CVE-2025-31160 + - civetweb: CVE-2025-55763 + - cjson: CVE-2025-57052 + - connman: CVE-2025-32366, CVE-2025-32743 + - cups: CVE-2025-58060, CVE-2025-58364 + - expat: CVE-2025-59375 + - fastd: CVE-2025-24356 + - fetchmail: CVE number pending + - ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800, + CVE-2025-59801 + - intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839, + CVE-2025-22840, CVE-2025-22889, CVE-2025-26403 + - jasper: CVE-2023-51257, CVE-2025-8835 + - libcurl: CVE-2025-10148, CVE-2025-9086 + - libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232 + - libssh: CVE-2025-8114, CVE-2025-8277 + - lua: CVE-2014-5461 + - opencv4: CVE-2025-53644 + - pcre2: CVE-2025-58050 + - poco: CVE-2025-6375 + - postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715 + - python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682 + - python-pip: CVE-2025-8869 + - raptor: CVE-2024-57822, CVE-2024-57823 + - syslog-ng: CVE-2024-47619 + - tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165 + + + Updated / fixed packages: asterisk, boinc, boot-wrapper-aarch64, c-icap, + chocolate-doom, cjson, cpp-httplib, cutekeyboard, docker-engine, fatcat, + fluent-bit, gnupg2, gnuplot, htpdate, iputils, kodi, libfreeimage, + libopenssl, libselinux, libsemanage, libxkbcommon, libxmlrpc, + linux-firmware, linuxptp, llvm, luaossl, luvi, mariadb, mdio-tools, + modsecurity2, openjpeg, pango, php-lua, policycoreutils, + python-aiohttp-session, python-certifi, python-cryptography, + python-flask-cors, python-pytz, python-trove-classifiers, + python-typing-extensions, rtl8723bu, rtl8723ds, rtl8821cu, rtl8822cs, + rtl_433, ruby, samba4, sysprof, ti-k3-boot-firmware, tiff, tor, uboot, + uclibc, upx, vulkan-headers, webkitgtk, wilc-driver, wlroots, x11r7, + xilinx-embeddedsw, xilinx-prebuilt, xlib_xtrans, xr819-xradio, zziplib + + Boards updated / fixed: beagleboneai, loongarch64-efi, qemu (all), + versal, zedboard + + Boards removed: at91sam9260eknf, atmel_sama5d3xek, roseapplepi + + Test Improvements: + + - test_docker_compose: update kernel & VM CPU + - TestZfsUclibc: use internal backend for uClibc-ng toolchain + - GitTestBase: remove git daemon due to Gitlab-CI security settings + 2025.08, released September 7th, 2025 Fixes all over the tree.