Adobe Patches for April 2026

For April, Adobe released 12 bulletins addressing 61 unique CVEs in Adobe Acrobat Reader, InDesign, InCopy, FrameMaker, Connect, ColdFusion, Bridge, Photoshop, Illustrator, Experience Manager Screens, and the Adobe DNG SDK. Three of the Cold Fusion bugs came through the TrendAI ZDI program. For this month, I’m introducing an Adobe table as well. I’d love to get your feedback on whether this is helpful.

Obviously, the active attack in Reader is the highest priority for this month, but don’t ignore the second bunch of Reader patches. Cold Fusion also gets a deployment priority of 1, so if you’re still running that platform, make sure you get the update. Otherwise, the FrameMaker and Connect patches fix 11 and nine bugs, respectively. InDesign and Experience Manager Screens also have nine CVEs addressed.

Outside of the Reader bug, none of the other bugs fixed by Adobe this month are listed as publicly known or under active attack at the time of release. One of the Reader bugs and Cold Fusion have a deployment priority of one, the other Reader bug has a priority of two, while all of the other updates released by Adobe this month are listed as deployment priority 3.

Microsoft Patches for April 2026

This month, Microsoft released a monstrous 163 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, SQL Server, Hyper-V Server, BitLocker, and the Windows Wallet Service. Counting the third-party and a huge Chromium release, it brings the total number of CVEs to a staggering 247 updates. Six of these bugs were reported through the TrendAI ZDI program. Eight of these bugs are rated Critical, two are rated as Moderate, and the rest are rated Important in severity.

By my count, this is the second-largest monthly release in Microsoft’s history. There are many things we could speculate on to justify the size, but if Microsoft is like the other programs out there (including ours), they are likely seeing a rise in submissions found by AI tools. For us, our incoming rate has essentially tripled, making triage a challenge, to say the least. Whatever the reason, we have a lot of bugs to deal with this month. I should also point out that the Pwn2Own Berlin occurs next month, and it’s typical for vendors to patch as much as they can before the event.

There is one Microsoft bug listed as under active attack at the time of release, and one other that’s publicly known. Let’s take a closer look at some of the more interesting updates for this month, starting with the vulnerability being exploited in the wild:

-    CVE-2026-32201 - Microsoft SharePoint Server Spoofing Vulnerability
Microsoft doesn’t provide a lot of information about this bug, but Spoofing bugs in SharePoint often manifest as cross-site scripting (XSS) bugs. They do note that attackers could view information or make changes to disclosed information. As always, they don’t provide any information on how widespread these attacks are, but I wouldn’t wait to test and deploy this fix – especially if you have internet-connected SharePoint servers.

-    CVE-2026-33825 - Microsoft Defender Elevation of Privilege Vulnerability
This bug is listed as publicly known, and this time, we know exactly where it was disclosed. There have been some questions about how exploitable this bug may be, but it does look like it’s a real problem – just with some reliability issues in its current state. I won’t add on to the commentary from the researcher about working with Microsoft. I’m just glad they are offering a fix for the vulnerability. If you rely on Defender, test and deploy this one quickly.

-   CVE-2026-33827 - Windows TCP/IP Remote Code Execution Vulnerability
This vulnerability allows remote, unauthenticated attackers to exploit code on affected systems without user interaction. That adds up to a wormable bug – at least on systems with IPv6 and IPSec enabled. It is a race condition, which sets exploitability to High on the CVSS scale, but we see race conditions exploited at Pwn2Own all the time, so don’t rely on that obstacle. If you’re running IPv6, I would test and deploy this fix quickly before public exploits become available.

-    CVE-2026-33824 - Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Speaking of wormable bugs, here’s our second one this month. By the title, we can tell that systems with IKE enabled are affected, but that leaves plenty of targets for attackers. Microsoft also notes a significant mitigation for this bug. Blocking UDP ports 500 and 4500 at the perimeter prevents external attackers from reaching the affected service. However, insiders could still target this for lateral movement within an enterprise. For enterprises using IKE, get this fix tested and deployed with haste.

Here’s the full list of CVEs released by Microsoft for April 2026:

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

† Indicates further administrative actions are required to fully address the vulnerability.

Looking at the other Critical-rated bugs in this month’s release, there are three Office-related bugs where the Preview Pane is once again listed as an exploit vector. I would still like to have a full-proof way of disabling the Preview Pane, but I don’t see that as an option. There’s a bug in the RDP client, but that involves connecting to a malicious RDP server. The bug in Active Directory requires authentication and a network adjacent attacker. The final Critical-rated bug is an interesting DoS in .NET Framework. An unauthenticated attacker could deny service over a network – presumably crippling any affected app made in .NET. You rarely see Critical-rated DoS bugs, but this one deserves the moniker.

Moving on to the other code execution bugs, you have quite a few open-and-own bugs in Office components, most notably Excel, where the Preview Pane is not an attack vector. The bug in SQL Server requires authentication, and as usual, additional steps are needed to ensure you have the correct update to remediate this vulnerability. The two bugs in Hyper-V almost reads like a privilege escalation since it allows unauthorized attackers to execute code locally. That’s the same for the bugs in the Windows Snipping Tool and the UPnP Device host.

More than half of this release addresses Elevation of Privilege (EoP) bugs. However, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there’s not much to add without further technical details about the bugs themselves. The bugs in SQL Server could allow an attacker to gain SQL sysadmin privileges. One of the kernel bugs simply states an attacker could “elevate privileges locally”. How obtuse. That’s similar for the bug in afd.sys and Desktop Windows Manager, but Microsoft also states that these bugs could crash an affected system. There are several bugs that result in a sandbox escape, including Windows Push Notifications, AFD for Winsock, Management Services, and User Interface Core. Of these, CVE-2026-26167 (Push Notifications) is the most notable — it's the only one with low attack complexity, meaning no race condition needed. The rest all require winning a race condition (AC:H). The bugs in UPnP are interesting as they allow attackers to gain access to a limited set of administrator-protected objects. Not a full escalation but definitely getting access to resources they shouldn’t. The vulnerability in the Brokering File System allows attackers to gain the level of the logged on user, so don’t do your normal activities as a user with admin privileges. The bug in Azure Monitor Agent leads to root-level access.

There are a dozen different security features bypass bugs in the April release. Some of these are obvious by the title alone. For example, the bugs in Windows Hello bypass safety features within the Hello app itself. The bug in the Biometric Service allows attackers to bypass biometric protections. The vulns in BitLocker and Secure Boot bypass protections in those components. The bug in Power Apps allows attackers to bypass a security warning dialog and trick targets into triggering an external protocol call that performs unintended actions on the user’s device. The bug in Windows Shell allows attackers to bypass Mark of the Web (MotW) protections. The bug in PowerShell could almost be described as a code execution bug as exploiting it bypasses dynamic-expression security checks, which could result in code execution. The vulnerability in the Windows Recovery Environment allows local attackers to bypass BitLocker device encryption. Finally, the bug in Virtualization‑Based Security (VBS) is the most interesting of the bunch – and not just because VBS is a (relatively) new feature. The problem allows attackers to manipulate allow a compromised Windows kernel to modify memory belonging to the secure kernel, breaking the intended isolation guarantees provided by VBS. Somewhat of a sandbox escape, but this time, you’re escaping from Virtual Trust Level 0 (VTL0) to Virtual Trust Level 1 (VTL1). Neat.

Moving on to the Information Disclosure bugs fixed this month, we have 20 different CVEs. Fortunately, most of these simply result in info leaks consisting of unspecified memory contents or memory addresses. While useful in crafting exploits, they aren’t exactly exciting on their own. There are also several bugs that disclose addresses from an object a contained in a sandboxed execution environment. This includes bugs in the Print Spooler, Package Catalog, and Web Account Manager. The bug in Dynamics 365 discloses the ever ineffable “sensitive information”. There are three different info disclosure bugs in UPnP. Two allow an attacker to read from the file system, while the third discloses anything available to the LOCAL SERVICE account. The final info disclosure bug resides in Copilot and Visual Studio and allows attackers to disclose the contents of the Model Context Protocol (MCP) when using Copilot. There are those who think MCP is dead (thanks to agentic AI agents), but if you’re using a custom MCP, I doubt you would want it leaked.

The April release contains just a handful of Spoofing bugs. Some, like the bugs in .NET, Active Directory, and Windows Shell, just say that they allow spoofing over a network. Others, like the bug in Windows Snipping Tool, say similar but also note that it could be used to relay NTLMv2 hashes. The patch for RDP notes that there are new warning dialogs coming this month. The bug in the Windows Admin Center would allow an attacker to interact with other tenant’s applications and content. Finally, the spoofing bug in SharePoint is another XSS issue.

There are eight DoS bugs in the April release, but as always, Microsoft provides no actionable information about the vulnerabilities. Microsoft does offer a mitigation for the http.sys bug that can be applied while you test and deploy the patch, but I would rely on the patch rather than the mitigation. Another exception is the bug for Connected User Experiences and Telemetry Service, which allows attackers to deny service locally rather than over the network.

The final(!) bug in the April release is a Tampering bug in WSUS that reads like a DoS. According to Microsoft, “An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).” But sure – let’s call it Tampering.

No new advisories are being released this month.

Looking Ahead

I will be in Berlin for the next Patch Tuesday, which will be May 12, and I’ll provide my full thoughts then on what will hopefully be a smaller release than this one. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

New in v1.28

• Bumped the winget version to 1.28 to match the package version.
• Additional options for limiting the size of log files.

New Feature: 'source edit'

New feature that adds an 'edit' subcommand to the 'source' command. This can be used to set an explicit source to be implicit and vice-versa. For example, with this feature you can make the 'winget-font' source an implicit source instead of explicit source.

To use the feature, try winget source edit winget-font to set the Explicit state to the default.

New Experimental Feature: 'listDetails'

The new experimental feature listDetails enables a new option for the list command, --details. When supplied, the output is no longer a table view of the results but is instead a series of show like outputs drawing data from the installed item.

An example output for a single installed package is:

> wingetdev list Microsoft.VisualStudio.2022.Enterprise --details
Visual Studio Enterprise 2022 [Microsoft.VisualStudio.2022.Enterprise]
Version: 17.14.21 (November 2025)
Publisher: Microsoft Corporation
Local Identifier: ARP\Machine\X86\875fed29
Product Code: 875fed29
Installer Category: exe
Installed Scope: Machine
Installed Location: C:\Program Files\Microsoft Visual Studio\2022\Enterprise
Available Upgrades:
  winget [17.14.23]

If sixels are enabled and supported by the terminal, an icon for the installed package will be shown.

To enable this feature, add the 'listDetails' experimental feature to your settings.

"experimentalFeatures": {
    "listDetails": true
},

Bug Fixes

• Portable Packages now use the correct directory separators regardless of which convention is used in the manifest
• --suppress-initial-details now works with winget configure test
• --suppress-initial-details no longer requires --accept-configuration-agreements
• Corrected property of Font experimental feature to accurately reflect fonts as the required setting value

What's Changed

• Update the other TDBuild task by @florelis in #5534
• Use windows-latest agents in localization pipeline by @florelis in #5538
• Bump version to v1.12 by @florelis in #5532
• Allow set foreground from PS by @JohnMcPMS in #5541
• Move to proper signal for dev/not-dev by @JohnMcPMS in #5552
• Use SDK 26100 in CommonCore project by @florelis in #5570
• Repair Repair-WinGetPackageManager by @florelis in #5568
• Use cpprestsdk v2.10.18 by @florelis in #5567
• Undefined-behaviour fix: safely call std::isspace in CompletionData by @mohiuddin-khan-shiam in #5564
• Add missing compilation flags for vcpkg ports by @florelis in #5587
• Add more missing flags for vcpkg by @florelis in #5592
• Swallow provisioned package errors by @JohnMcPMS in #5595
• Update detours vcpkg to use prior version by @JohnMcPMS in #5601
• Remove TestRelease by @JohnMcPMS in #5613
• Handle Byte Order Mark during validation by @Trenly in #5585
• Initial MCP Server implementation by @JohnMcPMS in #5610
• Update release notes for BOM Handling by @Trenly in #5622
• Don't build MCP for fuzzing by @JohnMcPMS in #5625
• Resolve nuget package graph for .NET projects together by @JohnMcPMS in #5627
• Update to latest MCP nuget by @JohnMcPMS in #5633
• Update release notes to mention WinUI dependency change by @florelis in #5656
• Improve COM server quiescing by @JohnMcPMS in #5652
• Improve issue forms & add corresponding label triggers by @mdanish-kh in #5661
• Fix conflict with issue forms by @Trenly in #5663
• Improve COM static store usage by @JohnMcPMS in #5680
• Update schema to 1.12 with Font InstallerType by @dkbennett in #5687
• Download MS Store package for target OS by @JohnMcPMS in #5689
• Fixes for older OSes by @JohnMcPMS in #5691
• Add RestSource and tests for Manifest v1.12 by @dkbennett in #5695
• Improve slow searches involving installed items by @JohnMcPMS in #5701
• Shorter default installer log filename by @JohnMcPMS in #5705
• Add the ARP correlation entry to the context for portable installs by @JohnMcPMS in #5707
• Fix two unrelated version issues by @JohnMcPMS in #5719
• Heal tracking database if it can't open by @JohnMcPMS in #5724
• MS Store cert pinning updates by @JohnMcPMS in #5732
• Update MCP GP name by @JohnMcPMS in #5736
• Add workflow for automatic issue deduplication by @cinnamon-msft in #5738
• moving workflow to parent by @denelon in #5740
• Cache information responses from REST sources by @JohnMcPMS in #5726
• Shared build props by @JohnMcPMS in #5749
• Improve shared props layout by @JohnMcPMS in #5751
• Fix portable path removal on upgrade by @dkbennett in #5756
• Minor update to release notes for v1.12 by @florelis in #5761
• Font Install, Uninstall, additional Font List by @dkbennett in #5566
• Fix install source and final progress by @JohnMcPMS in #5764
• Use winrt for time conversion by @JohnMcPMS in #5763
• Change label_as_duplicate to false in workflow by @Trenly in #5773
• Remove openssl from sfsclient cgmanifest by @florelis in #5775
• Add admin check to uninstall of machine font by @dkbennett in #5779
• Add Font source group policy support by @dkbennett in #5646
• Improve window thread termination by @JohnMcPMS in #5781
• Fix portable installer issues when installing to non ascii path by @yao-msft in #5788
• Remove experimental from Font Install, Uninstall, and source by @dkbennett in #5791
• Update NOTICE by @JohnMcPMS in #5801
• Update localized strings by @florelis in #5805
• Bump version to 1.28 by @florelis in #5787
• Move to latest 7.4 PS SDK by @JohnMcPMS in #5811
• Enable MultiProcessorCompilation by @Trenly in #5804
• Remove mention of WinGet Insider program from the README by @florelis in #5832
• Ignore ReleaseStatic outputs and clean intermediates by @JohnMcPMS in #5848
• Make Repair-WGPM a COM-aware cmdlet and rework version retrieval by @JohnMcPMS in #5842
• Unregister signal handler by @JohnMcPMS in #5861
• Support associating export units with packages in subdirectories of install location by @JohnMcPMS in #5859
• Send host geo to sandbox by @JohnMcPMS in #5873
• Update C++ nuget package references using new scripts by @JohnMcPMS in #5877
• Update platform toolset by @florelis in #5882
• Extract event log for potential crash info by @JohnMcPMS in #5807
• Update CODEOWNERS to include winget-developers by @florelis in #5891
• Fixes for VS2026 by @florelis in #5896
• Additional logging limitations and control by @JohnMcPMS in #5888
• Use hybrid CRT linkage instead of full static by @JohnMcPMS in #5913
• Enable source reference to get thread globals for off-thread logging by @JohnMcPMS in #5780
• Fix JSON, missing closing brace by @doterik in #5924
• Test host for in-proc COM module validation by @JohnMcPMS in #5910
• Add sleep to allow background threads to quiesce by @JohnMcPMS in #5933
• Allow suppressing configuration output on test by @Trenly in #5794
• Enable Explicit toggling for sources (i.e. Enable/Disable) by @dkbennett in #5904
• Fix fuzz build by @JohnMcPMS in #5932
• Normalize directory separators when adding packages to path by @Trenly in #5796
• Add sleep to another inproc test by @JohnMcPMS in #5935
• Don't build inproc testbed for fuzzing by @JohnMcPMS in #5937
• Create schema 1.12.0 folder by @Trenly in #5944
• Fix names of 1.12 Schemas by @Trenly in #5945
• Fix Font feature property name by @Trenly in #5946
• Add check to ensure vcpkg triplets match across projects by @florelis in #5950
• Update release notes for v1.28 by @florelis in #5957
• Details output option for list by @JohnMcPMS in #5939
• PowerShell Repair enhancements by @AmelBawa-msft in #5711
• Allow inproc callers to disable termination signal handlers by @JohnMcPMS in #5958
• Add manifest version to WinGetUtilInterop by @msftrubengu in #5964
• Fixes for updating winget from winget by @JohnMcPMS in #5972
• Diagnostics and fix for pipeline test failures by @JohnMcPMS in #5975
• Escape caller in user agent header by @JohnMcPMS in #5998
• Add DSC resource list to manifest by @JohnMcPMS in #5997
• Add command builder with escaped user input by @AmelBawa-msft in #5982
• Add missing closing brace in settings.export.schema.0.1.json by @DuckDuckStudio in #6004
• Turn off PWSH UT build in Fuzzing and ReleaseStatic for all platforms by @AmelBawa-msft in #6005
• Remove experimental feature gate on source edit by @dkbennett in #6006
• Update ReleaseNotes by @florelis in #6007
• Make list details stable (1.28) by @JohnMcPMS in #6021
• Move to IReference rather than custom enum for optional bool (1.28) by @JohnMcPMS in #6024
• Apply latest localization patch (1.28) by @florelis in #6025

New Contributors

• @mohiuddin-khan-shiam made their first contribution in #5564
• @doterik made their first contribution in #5924

Full Changelog: v1.11.400...v1.28.220

New in v1.28

• Bumped the winget version to 1.28 to match the package version.
• Additional options for limiting the size of log files.

New Feature: 'source edit'

New feature that adds an 'edit' subcommand to the 'source' command. This can be used to set an explicit source to be implicit and vice-versa. For example, with this feature you can make the 'winget-font' source an implicit source instead of explicit source.

To use the feature, try winget source edit winget-font to set the Explicit state to the default.

New Experimental Feature: 'listDetails'

The new experimental feature listDetails enables a new option for the list command, --details. When supplied, the output is no longer a table view of the results but is instead a series of show like outputs drawing data from the installed item.

An example output for a single installed package is:

> wingetdev list Microsoft.VisualStudio.2022.Enterprise --details
Visual Studio Enterprise 2022 [Microsoft.VisualStudio.2022.Enterprise]
Version: 17.14.21 (November 2025)
Publisher: Microsoft Corporation
Local Identifier: ARP\Machine\X86\875fed29
Product Code: 875fed29
Installer Category: exe
Installed Scope: Machine
Installed Location: C:\Program Files\Microsoft Visual Studio\2022\Enterprise
Available Upgrades:
  winget [17.14.23]

If sixels are enabled and supported by the terminal, an icon for the installed package will be shown.

To enable this feature, add the 'listDetails' experimental feature to your settings.

"experimentalFeatures": {
    "listDetails": true
},

Bug Fixes

• Portable Packages now use the correct directory separators regardless of which convention is used in the manifest
• --suppress-initial-details now works with winget configure test
• --suppress-initial-details no longer requires --accept-configuration-agreements
• Corrected property of Font experimental feature to accurately reflect fonts as the required setting value

What's Changed

• Update the other TDBuild task by @florelis in #5534
• Use windows-latest agents in localization pipeline by @florelis in #5538
• Bump version to v1.12 by @florelis in #5532
• Allow set foreground from PS by @JohnMcPMS in #5541
• Move to proper signal for dev/not-dev by @JohnMcPMS in #5552
• Use SDK 26100 in CommonCore project by @florelis in #5570
• Repair Repair-WinGetPackageManager by @florelis in #5568
• Use cpprestsdk v2.10.18 by @florelis in #5567
• Undefined-behaviour fix: safely call std::isspace in CompletionData by @mohiuddin-khan-shiam in #5564
• Add missing compilation flags for vcpkg ports by @florelis in #5587
• Add more missing flags for vcpkg by @florelis in #5592
• Swallow provisioned package errors by @JohnMcPMS in #5595
• Update detours vcpkg to use prior version by @JohnMcPMS in #5601
• Remove TestRelease by @JohnMcPMS in #5613
• Handle Byte Order Mark during validation by @Trenly in #5585
• Initial MCP Server implementation by @JohnMcPMS in #5610
• Update release notes for BOM Handling by @Trenly in #5622
• Don't build MCP for fuzzing by @JohnMcPMS in #5625
• Resolve nuget package graph for .NET projects together by @JohnMcPMS in #5627
• Update to latest MCP nuget by @JohnMcPMS in #5633
• Update release notes to mention WinUI dependency change by @florelis in #5656
• Improve COM server quiescing by @JohnMcPMS in #5652
• Improve issue forms & add corresponding label triggers by @mdanish-kh in #5661
• Fix conflict with issue forms by @Trenly in #5663
• Improve COM static store usage by @JohnMcPMS in #5680
• Update schema to 1.12 with Font InstallerType by @dkbennett in #5687
• Download MS Store package for target OS by @JohnMcPMS in #5689
• Fixes for older OSes by @JohnMcPMS in #5691
• Add RestSource and tests for Manifest v1.12 by @dkbennett in #5695
• Improve slow searches involving installed items by @JohnMcPMS in #5701
• Shorter default installer log filename by @JohnMcPMS in #5705
• Add the ARP correlation entry to the context for portable installs by @JohnMcPMS in #5707
• Fix two unrelated version issues by @JohnMcPMS in #5719
• Heal tracking database if it can't open by @JohnMcPMS in #5724
• MS Store cert pinning updates by @JohnMcPMS in #5732
• Update MCP GP name by @JohnMcPMS in #5736
• Add workflow for automatic issue deduplication by @cinnamon-msft in #5738
• moving workflow to parent by @denelon in #5740
• Cache information responses from REST sources by @JohnMcPMS in #5726
• Shared build props by @JohnMcPMS in #5749
• Improve shared props layout by @JohnMcPMS in #5751
• Fix portable path removal on upgrade by @dkbennett in #5756
• Minor update to release notes for v1.12 by @florelis in #5761
• Font Install, Uninstall, additional Font List by @dkbennett in #5566
• Fix install source and final progress by @JohnMcPMS in #5764
• Use winrt for time conversion by @JohnMcPMS in #5763
• Change label_as_duplicate to false in workflow by @Trenly in #5773
• Remove openssl from sfsclient cgmanifest by @florelis in #5775
• Add admin check to uninstall of machine font by @dkbennett in #5779
• Add Font source group policy support by @dkbennett in #5646
• Improve window thread termination by @JohnMcPMS in #5781
• Fix portable installer issues when installing to non ascii path by @yao-msft in #5788
• Remove experimental from Font Install, Uninstall, and source by @dkbennett in #5791
• Update NOTICE by @JohnMcPMS in #5801
• Update localized strings by @florelis in #5805
• Bump version to 1.28 by @florelis in #5787
• Move to latest 7.4 PS SDK by @JohnMcPMS in #5811
• Enable MultiProcessorCompilation by @Trenly in #5804
• Remove mention of WinGet Insider program from the README by @florelis in #5832
• Ignore ReleaseStatic outputs and clean intermediates by @JohnMcPMS in #5848
• Make Repair-WGPM a COM-aware cmdlet and rework version retrieval by @JohnMcPMS in #5842
• Unregister signal handler by @JohnMcPMS in #5861
• Support associating export units with packages in subdirectories of install location by @JohnMcPMS in #5859
• Send host geo to sandbox by @JohnMcPMS in #5873
• Update C++ nuget package references using new scripts by @JohnMcPMS in #5877
• Update platform toolset by @florelis in #5882
• Extract event log for potential crash info by @JohnMcPMS in #5807
• Update CODEOWNERS to include winget-developers by @florelis in #5891
• Fixes for VS2026 by @florelis in #5896
• Additional logging limitations and control by @JohnMcPMS in #5888
• Use hybrid CRT linkage instead of full static by @JohnMcPMS in #5913
• Enable source reference to get thread globals for off-thread logging by @JohnMcPMS in #5780
• Fix JSON, missing closing brace by @doterik in #5924
• Test host for in-proc COM module validation by @JohnMcPMS in #5910
• Add sleep to allow background threads to quiesce by @JohnMcPMS in #5933
• Allow suppressing configuration output on test by @Trenly in #5794
• Enable Explicit toggling for sources (i.e. Enable/Disable) by @dkbennett in #5904
• Fix fuzz build by @JohnMcPMS in #5932
• Normalize directory separators when adding packages to path by @Trenly in #5796
• Add sleep to another inproc test by @JohnMcPMS in #5935
• Don't build inproc testbed for fuzzing by @JohnMcPMS in #5937
• Create schema 1.12.0 folder by @Trenly in #5944
• Fix names of 1.12 Schemas by @Trenly in #5945
• Fix Font feature property name by @Trenly in #5946
• Add check to ensure vcpkg triplets match across projects by @florelis in #5950
• Update release notes for v1.28 by @florelis in #5957
• Details output option for list by @JohnMcPMS in #5939
• PowerShell Repair enhancements by @AmelBawa-msft in #5711
• Allow inproc callers to disable termination signal handlers by @JohnMcPMS in #5958
• Add manifest version to WinGetUtilInterop by @msftrubengu in #5964
• Fixes for updating winget from winget by @JohnMcPMS in #5972
• Diagnostics and fix for pipeline test failures by @JohnMcPMS in #5975
• Escape caller in user agent header by @JohnMcPMS in #5998
• Add DSC resource list to manifest by @JohnMcPMS in #5997
• Add command builder with escaped user input by @AmelBawa-msft in #5982
• Add missing closing brace in settings.export.schema.0.1.json by @DuckDuckStudio in #6004
• Turn off PWSH UT build in Fuzzing and ReleaseStatic for all platforms by @AmelBawa-msft in #6005
• Remove experimental feature gate on source edit by @dkbennett in #6006
• Update ReleaseNotes by @florelis in #6007
• Make list details stable (1.28) by @JohnMcPMS in #6021
• Move to IReference rather than custom enum for optional bool (1.28) by @JohnMcPMS in #6024
• Apply latest localization patch (1.28) by @florelis in #6025

New Contributors

• @mohiuddin-khan-shiam made their first contribution in #5564
• @doterik made their first contribution in #5924

Full Changelog: v1.11.400...v1.28.240

https://security-tracker.debian.org/tracker/DSA-6330-1

Trail of Bits doesn’t usually make a point of publicly calling out specific products as unsafe. Our motto is that we don’t just fix bugs—we fix software. We do better by the world when we work to address systemic threats, not individual bugs. That’s why we work to provide static analysis tools, auditing tools, and documentation for folks looking to implement cryptographic software. When you improve systems, you improve software.

But sometimes, a single bug in a piece of software has an outsized impact on the cryptography ecosystem, and we need to address it.

This is the story of how two developers reacted to a security problem, and how their responses illustrate the difference between carelessness and craftsmanship.

Reusing initialization vectors

Reusing a key/IV pair leads to serious security issues: if you encrypt two messages in CTR mode or GCM with the same key and IV, then anybody with access to the ciphertexts can recover the XOR of the plaintexts, and that’s a very bad thing. Like, “your security is going to get absolutely wrecked” bad. One of our cryptography analysts has written an excellent introduction to the topic, in case you’d like more details; it’s great reading.

Even if the XOR of the plaintexts doesn’t help an attacker, it still makes the encryption very brittle: if you’re encrypting all your secrets by XORing them against a fixed mask, then recovering just one of those secrets will reveal the mask. Once you have that, you can recover all the other secrets. Maybe all your secrets will remain secure against prying eyes, but the fact remains: in the very best case, the security of all your secrets becomes no better than the security of your weakest secret.

aes-js and pyaes

As you might guess from the names, aes-js and pyaes are JavaScript and Python libraries that implement the AES block cipher. They’re pretty widely used: the Node.js package manager (npm) repository lists 850 aes-js dependents as of this writing, and GitHub estimates that over 700,000 repositories integrate aes-js and nearly 23,000 repositories integrate pyaes, either as direct or indirect dependencies.

Unfortunately, despite their widespread adoption, aes-js and pyaes suffer from a careless mistake that creates serious security problems.

The default IV problem

We’ll start with the biggest concern Trail of Bits identified: when instantiating AES in CTR mode, aes-js and pyaes do not require an IV. Instead, if no IV is specified, libraries will supply a default IV of 0x00000000_00000000_00000000_00000001.

Worse still, the documentation provides examples of this behavior as typical behavior. For example, this comes from the pyaes README:

aes = pyaes.AESModeOfOperationCTR(key)
plaintext = "Text may be any length you wish, no padding is required"
ciphertext = aes.encrypt(plaintext)

The first line ought to be something like aes = pyaes.AESModeOfOperationCTR(key, iv), where iv is a randomly generated value. Users who follow this example will always wind up with the same IV, making it inevitable that many (if not most) will wind up with a key/IV reuse bug in their software. Most people are looking for an easy-to-use encryption library, and what’s simpler than just passing in the key?

That apparent simplicity has led to widespread use of the “default,” creating a multitude of key/IV reuse vulnerabilities.

Other issues

Lack of modern cipher modes

aes-js and pyaes don’t support modern cipher modes like AES-GCM and AES-GCM-SIV. In most contexts where you want to use AES, you likely want to use these modes, as they offer authentication in addition to encryption. This is no small issue: even for programs that use aes-js or pyaes with distinct key/IV pairs, AES CTR ciphertexts are still malleable: if an attacker changes the bits in the ciphertext, then the resulting bits in the plaintext will change in exactly the same way, and CTR mode doesn’t provide any way to detect this. This can allow an attacker to recover an ECDSA key by tricking the user into signing messages with a series of related keys.

Cipher modes like GCM and GCM-SIV prevent this by computing keyed “tags” that will fail to authenticate when the ciphertext is modified, even by a single bit. Pretty nifty feature, but support is completely absent from aes-js and pyaes.

Timing problems

On top of that, both aes-js and pyaes are vulnerable to side-channel attacks. Both libraries use lookup tables for the AES S-box, which enables cache-timing attacks. On top of that, there are timing issues in the PKCS7 implementation, enabling a padding oracle attack when used in CBC mode.

Lack of updates

aes-js hasn’t been updated since 2018. pyaes hasn’t been touched since 2017. Since then, a number of issues have been filed against both libraries. Here are just a few examples:

• Outdated distribution tools for pyaes (it relies on distutils, which has been deprecated since October 2023)
• Performance issues in the streaming API
• UTF-8 encoding problems in aes-js
• Lack of IV and key generation routines in both

Developer response

Finally, in 2022, an issue was filed against aes-js about the default IV problem. The developer’s response ended with the following:

The AES block cipher is a cryptographic primitive, so it’s very important to understand and use it properly, based on its application. It’s a powerful tool, and with great power, yadda, yadda, yadda. :)

Look, even at the best of times, cryptography is a minefield: a space full of hidden dangers, where one wrong step can blow things up entirely. When designing tools for others, developers have a responsibility to help their users avoid foreseeable mistakes—or at the very least, to avoid making it more likely that they’ll step on such landmines. Writing off a serious concern like this with “yadda, yadda, yadda” is deeply concerning.

In November 2025, we reached out to the maintainer via email and via X, but we received no response.

The original design decision to include a default IV was a mistake, but an understandable one for somebody trying to make their library accessible to as many people as possible. And mistakes happen, especially in cryptography. The problem is what came next. When a user raised the concern, it was written off with ‘yadda, yadda, yadda.’ The landmine wasn’t removed. The documentation still suggests the best way to step on it. This is what carelessness looks like: not the initial mistake, but the choice to leave it unfixed when its danger became clear.

Craftsmanship

We identified several pieces of software impacted by the default IV behavior in pyaes and aes-js. Many of the programs we found have been deprecated, and we even found a couple of vulnerable wallets for cryptocurrencies that are no longer traded. We also picked out a large number of programs where the security impact of key/IV reuse was minimal or overshadowed by larger security concerns (for instance, there were a few programs that reused key/IV pairs, but the key was derived from a 4-digit PIN).

However, one of the programs we found struck us as important: a VPN management suite.

strongMan VPN Manager

strongMan is a web-based management tool for folks using the strongSwan VPN suite. It allows for credential and user management, initiation of VPN connections, and more. It’s a pretty slick piece of software; if you’re into IPsec VPNs, you should definitely give it a look.

strongMan stored PKCS#8-encoded keys in a SQLite database, encrypted with AES. As you’ve probably guessed, it used pyaes to encrypt them in CTR mode, relying on the default IV. In PKCS#8 key files, RSA private keys include both the decryption exponent and the factors of the public modulus. For the same modulus size, the factors of the modulus will “line up” to start at the same place in the private key encodings about 99.6% of the time. For a pair of 2048-bit moduli, we can use the XOR of the factors to recover the factors in a matter of seconds.

Even worse, the full X.509 certificates were also encrypted using the same key/IV pair used to encrypt the private keys. Since certificates include a huge amount of predictable or easily guessable data, it’s easy to recover the keystream from the known X.509 data, and then use the recovered keystream to decrypt the private keys without resorting to any fancy XORed-factors mathematical trickery.

In short, if a hacker could recover a strongMan user’s SQLite file, they could immediately impersonate anyone whose certificates are stored in the database and even mount person-in-the-middle attacks. Obviously, this is not a great outcome.

We privately reported this issue to the strongSwan team. Tobias Brunner, the strongMan maintainer, provided an absolute model response to a security issue of this severity. He immediately created a security-fix branch and collaborated with Trail of Bits to develop stronger protection for his users. This patch has since been rolled out, and the update includes migration tools to help users update their old databases to the new format.

Doing it right

There were several viable approaches to fixing this issue. Adding a unique IV for each encrypted entry in the database would have allowed strongMan to keep using pyaes, and would have addressed the immediate issue. But if the code has to be changed, it may as well be updated to something modern.

After some discussion, several changes were made to the application:

• pyaes was replaced with a library that supports modern cipher modes.
• CTR mode was replaced with GCM-SIV, a cipher mode that includes authentication tags.
• Tag-checking was integrated into the decryption routines.
• A per-entry key derivation scheme is now used to ensure that key/IV pairs don’t repeat.

On top of all that, there are now migration scripts to allow strongMan users to seamlessly update their databases.

There will be a security advisory for strongMan issued in conjunction with this fix, outlining the nature of the problem, its severity, and the measures taken to address it. Everything will be out in the open, with full transparency for all strongMan users.

What Tobias did in this case has a name: craftsmanship. He sweated the details, thought extensively about his decisions, and moved with careful deliberation.

A difference in approaches

Mistakes in cryptography are not a sin, even if they can have a serious impact. They’re simply a fact of life. As somebody once said, “cryptography is nightmare magic math that cares what color pen you use.” We’re all going to get stuff wrong if we stick around long enough to do something interesting, and there’s no reason to deride somebody for making a mistake.

What matters—what separates carelessness from craftsmanship—is the response to a mistake. A careless developer will write off a mistake as no big deal or insist that it isn’t really a problem—yadda, yadda, yadda. A craftsman will respond by fixing what’s broken, examining their tools and processes, and doing what they can to prevent it from happening again.

In the end, only you can choose which way you go. Hopefully, you’ll choose craftsmanship.

What's Changed

• fix(common): hide horizontal scrollbar in Firefox for URL input by @Theproudcold in #5906
• fix(backend): prevent request payload from overriding id and name by @mirarifhasan in #5913
• fix(backend): enforce user ownership when deleting PAT by @mirarifhasan in #5916
• fix(common): update documentation link for mock server by @sh3xu in #5929
• fix(backend): bump Prisma packages to 7.4.2 by @mirarifhasan in #5932

New Contributors

• @Theproudcold made their first contribution in #5906
• @sh3xu made their first contribution in #5929

Full Changelog: 2026.2.0...2026.2.1

A vulnerability in libtls related to the processing of the supported_versions extension in TLS that can result in an infinite loop.

CVE-2026-35329

Vulnerabilities in libstrongswan and the pkcs7 plugin related to the processing of encrypted PKCS#7 containers that can result in a crash.

CVE-2026-35330

A vulnerability in libsimaka related to the processing of certain EAP-SIM/AKA attributes that can result in an infinite loop or a heap-based buffer overflow and potentially remote code execution.

CVE-2026-35331

A vulnerability in the constraints plugin related to the processing of X.509 name constraints that can allow authentication with certificates that violate the constraints.

CVE-2026-35332

A vulnerability in libtls related to the processing of ECDH public values in TLS < 1.3 that can result in a crash.

CVE-2026-35333

A vulnerability in libradius related to the processing of RADIUS attributes that can result in an infinite loop or an out-of-bounds read that may cause a crash.

CVE-2026-35334

A vulnerability in the gmp plugin related to RSA decryption that can result in a crash.

https://security-tracker.debian.org/tracker/DSA-6227-1

Adobe Patches for April 2026

For April, Adobe released 12 bulletins addressing 61 unique CVEs in Adobe Acrobat Reader, InDesign, InCopy, FrameMaker, Connect, ColdFusion, Bridge, Photoshop, Illustrator, Experience Manager Screens, and the Adobe DNG SDK. Three of the Cold Fusion bugs came through the TrendAI ZDI program. For this month, I’m introducing an Adobe table as well. I’d love to get your feedback on whether this is helpful.

Obviously, the active attack in Reader is the highest priority for this month, but don’t ignore the second bunch of Reader patches. Cold Fusion also gets a deployment priority of 1, so if you’re still running that platform, make sure you get the update. Otherwise, the FrameMaker and Connect patches fix 11 and nine bugs, respectively. InDesign and Experience Manager Screens also have nine CVEs addressed.

Outside of the Reader bug, none of the other bugs fixed by Adobe this month are listed as publicly known or under active attack at the time of release. One of the Reader bugs and Cold Fusion have a deployment priority of one, the other Reader bug has a priority of two, while all of the other updates released by Adobe this month are listed as deployment priority 3.

Microsoft Patches for April 2026

This month, Microsoft released a monstrous 163 new CVEs in Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, SQL Server, Hyper-V Server, BitLocker, and the Windows Wallet Service. Counting the third-party and a huge Chromium release, it brings the total number of CVEs to a staggering 247 updates. Six of these bugs were reported through the TrendAI ZDI program. Eight of these bugs are rated Critical, two are rated as Moderate, and the rest are rated Important in severity.

By my count, this is the second-largest monthly release in Microsoft’s history. There are many things we could speculate on to justify the size, but if Microsoft is like the other programs out there (including ours), they are likely seeing a rise in submissions found by AI tools. For us, our incoming rate has essentially tripled, making triage a challenge, to say the least. Whatever the reason, we have a lot of bugs to deal with this month. I should also point out that the Pwn2Own Berlin occurs next month, and it’s typical for vendors to patch as much as they can before the event.

There is one Microsoft bug listed as under active attack at the time of release, and one other that’s publicly known. Let’s take a closer look at some of the more interesting updates for this month, starting with the vulnerability being exploited in the wild:

-    CVE-2026-32201 - Microsoft SharePoint Server Spoofing Vulnerability
Microsoft doesn’t provide a lot of information about this bug, but Spoofing bugs in SharePoint often manifest as cross-site scripting (XSS) bugs. They do note that attackers could view information or make changes to disclosed information. As always, they don’t provide any information on how widespread these attacks are, but I wouldn’t wait to test and deploy this fix – especially if you have internet-connected SharePoint servers.

-    CVE-2026-33825 - Microsoft Defender Elevation of Privilege Vulnerability
This bug is listed as publicly known, and this time, we know exactly where it was disclosed. There have been some questions about how exploitable this bug may be, but it does look like it’s a real problem – just with some reliability issues in its current state. I won’t add on to the commentary from the researcher about working with Microsoft. I’m just glad they are offering a fix for the vulnerability. If you rely on Defender, test and deploy this one quickly.

-   CVE-2026-33827 - Windows TCP/IP Remote Code Execution Vulnerability
This vulnerability allows remote, unauthenticated attackers to exploit code on affected systems without user interaction. That adds up to a wormable bug – at least on systems with IPv6 and IPSec enabled. It is a race condition, which sets exploitability to High on the CVSS scale, but we see race conditions exploited at Pwn2Own all the time, so don’t rely on that obstacle. If you’re running IPv6, I would test and deploy this fix quickly before public exploits become available.

-    CVE-2026-33824 - Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Speaking of wormable bugs, here’s our second one this month. By the title, we can tell that systems with IKE enabled are affected, but that leaves plenty of targets for attackers. Microsoft also notes a significant mitigation for this bug. Blocking UDP ports 500 and 4500 at the perimeter prevents external attackers from reaching the affected service. However, insiders could still target this for lateral movement within an enterprise. For enterprises using IKE, get this fix tested and deployed with haste.

Here’s the full list of CVEs released by Microsoft for April 2026:

* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.

† Indicates further administrative actions are required to fully address the vulnerability.

Looking at the other Critical-rated bugs in this month’s release, there are three Office-related bugs where the Preview Pane is once again listed as an exploit vector. I would still like to have a full-proof way of disabling the Preview Pane, but I don’t see that as an option. There’s a bug in the RDP client, but that involves connecting to a malicious RDP server. The bug in Active Directory requires authentication and a network adjacent attacker. The final Critical-rated bug is an interesting DoS in .NET Framework. An unauthenticated attacker could deny service over a network – presumably crippling any affected app made in .NET. You rarely see Critical-rated DoS bugs, but this one deserves the moniker.

Moving on to the other code execution bugs, you have quite a few open-and-own bugs in Office components, most notably Excel, where the Preview Pane is not an attack vector. The bug in SQL Server requires authentication, and as usual, additional steps are needed to ensure you have the correct update to remediate this vulnerability. The two bugs in Hyper-V almost reads like a privilege escalation since it allows unauthorized attackers to execute code locally. That’s the same for the bugs in the Windows Snipping Tool and the UPnP Device host.

More than half of this release addresses Elevation of Privilege (EoP) bugs. However, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there’s not much to add without further technical details about the bugs themselves. The bugs in SQL Server could allow an attacker to gain SQL sysadmin privileges. One of the kernel bugs simply states an attacker could “elevate privileges locally”. How obtuse. That’s similar for the bug in afd.sys and Desktop Windows Manager, but Microsoft also states that these bugs could crash an affected system. There are several bugs that result in a sandbox escape, including Windows Push Notifications, AFD for Winsock, Management Services, and User Interface Core. Of these, CVE-2026-26167 (Push Notifications) is the most notable — it's the only one with low attack complexity, meaning no race condition needed. The rest all require winning a race condition (AC:H). The bugs in UPnP are interesting as they allow attackers to gain access to a limited set of administrator-protected objects. Not a full escalation but definitely getting access to resources they shouldn’t. The vulnerability in the Brokering File System allows attackers to gain the level of the logged on user, so don’t do your normal activities as a user with admin privileges. The bug in Azure Monitor Agent leads to root-level access.

There are a dozen different security features bypass bugs in the April release. Some of these are obvious by the title alone. For example, the bugs in Windows Hello bypass safety features within the Hello app itself. The bug in the Biometric Service allows attackers to bypass biometric protections. The vulns in BitLocker and Secure Boot bypass protections in those components. The bug in Power Apps allows attackers to bypass a security warning dialog and trick targets into triggering an external protocol call that performs unintended actions on the user’s device. The bug in Windows Shell allows attackers to bypass Mark of the Web (MotW) protections. The bug in PowerShell could almost be described as a code execution bug as exploiting it bypasses dynamic-expression security checks, which could result in code execution. The vulnerability in the Windows Recovery Environment allows local attackers to bypass BitLocker device encryption. Finally, the bug in Virtualization‑Based Security (VBS) is the most interesting of the bunch – and not just because VBS is a (relatively) new feature. The problem allows attackers to manipulate allow a compromised Windows kernel to modify memory belonging to the secure kernel, breaking the intended isolation guarantees provided by VBS. Somewhat of a sandbox escape, but this time, you’re escaping from Virtual Trust Level 0 (VTL0) to Virtual Trust Level 1 (VTL1). Neat.

Moving on to the Information Disclosure bugs fixed this month, we have 20 different CVEs. Fortunately, most of these simply result in info leaks consisting of unspecified memory contents or memory addresses. While useful in crafting exploits, they aren’t exactly exciting on their own. There are also several bugs that disclose addresses from an object a contained in a sandboxed execution environment. This includes bugs in the Print Spooler, Package Catalog, and Web Account Manager. The bug in Dynamics 365 discloses the ever ineffable “sensitive information”. There are three different info disclosure bugs in UPnP. Two allow an attacker to read from the file system, while the third discloses anything available to the LOCAL SERVICE account. The final info disclosure bug resides in Copilot and Visual Studio and allows attackers to disclose the contents of the Model Context Protocol (MCP) when using Copilot. There are those who think MCP is dead (thanks to agentic AI agents), but if you’re using a custom MCP, I doubt you would want it leaked.

The April release contains just a handful of Spoofing bugs. Some, like the bugs in .NET, Active Directory, and Windows Shell, just say that they allow spoofing over a network. Others, like the bug in Windows Snipping Tool, say similar but also note that it could be used to relay NTLMv2 hashes. The patch for RDP notes that there are new warning dialogs coming this month. The bug in the Windows Admin Center would allow an attacker to interact with other tenant’s applications and content. Finally, the spoofing bug in SharePoint is another XSS issue.

There are eight DoS bugs in the April release, but as always, Microsoft provides no actionable information about the vulnerabilities. Microsoft does offer a mitigation for the http.sys bug that can be applied while you test and deploy the patch, but I would rely on the patch rather than the mitigation. Another exception is the bug for Connected User Experiences and Telemetry Service, which allows attackers to deny service locally rather than over the network.

The final(!) bug in the April release is a Tampering bug in WSUS that reads like a DoS. According to Microsoft, “An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).” But sure – let’s call it Tampering.

No new advisories are being released this month.

Looking Ahead

I will be in Berlin for the next Patch Tuesday, which will be May 12, and I’ll provide my full thoughts then on what will hopefully be a smaller release than this one. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

Hello Manjaro user community, here we have another set of package updates. This might mark the start of the development cycle of the upcoming ‘Bian-May’ release series. With this we aim to update the default kernel to 7.0 series. Also there will be Plasma 6.6 series, KDE Gears 26.04 and GNOME 50 release series. XFCE will stay at 4.20 this release cycle. A release of ‘Bian-May’ can be expected end of April, beginning of May. Let us know any issues you may found thus far …

Current Promotions

• Get the latest Gaming Laptop by Slimbook powered by Manjaro: Slimbook Manjaro III
• Protect your personal data, keep yourself safe with Surfshark VPN: See current promotion

Recent News

• Manjaro 26.0 Anh-Linh released
• Manjaro Summit public Alpha now available
• As of Linux 5.4.302, the 5.4 series is now EOL (End Of Life). Please install 5.10 LTS (Long Term Support) or 5.15 LTS.
• As of Linux 6.16.12, the 6.16 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.
• As of Linux 6.17.13, the 6.17 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.

Notable Package Updates

• Kernel 7.0 got updated to 7.0-rc6
• GNOME 49.5
• Thunderbird 149.0.1
• Some updates to Deepin
• freecad 1.1.0
• Rebuilds and updates to haskell
• wireplumber 0.5.14

Additional Info

Get our latest daily developer images now from Github: Plasma, GNOME, XFCE. You can get the latest stable releases of Manjaro from CDN77.

Our current supported kernels

• linux510 5.10.252
• linux515 5.15.202
• linux61 6.1.167
• linux66 6.6.130
• linux612 6.12.78
• linux618 6.18.20
• linux619 6.19.10
• linux70 7.0.0rc6
• linux61-rt 6.1.166_rt61
• linux66-rt 6.6.129_rt70
• linux612-rt 6.12.74_rt16
• linux617-rt 6.17.5_rt7

Package Changes (3/31/26 05:17 CEST)

• testing core x86_64: 3 new and 3 removed package(s)
• testing extra x86_64: 1131 new and 1127 removed package(s)
• testing multilib x86_64: 8 new and 8 removed package(s)

:: Different overlay package(s) in repository core x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                             linux70           7.0.0rc5-1           7.0.0rc6-1
                     linux70-headers           7.0.0rc5-1           7.0.0rc6-1


:: Different sync package(s) in repository core x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                                file               5.47-1               5.47-2


:: Different overlay package(s) in repository extra x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                             discord          1:0.0.131-1                    -
                   linux70-acpi_call            1.2.2-0.5            1.2.2-0.6
                    linux70-bbswitch              0.8-0.5              0.8-0.6
                 linux70-broadcom-wl     6.30.223.271-0.5     6.30.223.271-0.6
                linux70-nvidia-470xx       470.256.02-0.5       470.256.02-0.6
                 linux70-nvidia-open        595.58.03-0.1        595.58.03-0.2
                       linux70-r8168         8.056.02-0.5         8.056.02-0.6
                   linux70-rtl8723bu         20250813-0.5         20250813-0.6
                    linux70-tp_smapi             0.45-0.5             0.45-0.6
                 linux70-vhba-module         20250329-0.5         20250329-0.6
     linux70-virtualbox-host-modules            7.2.6-0.5            7.2.6-0.6
                         linux70-zfs            2.4.1-0.5            2.4.1-0.6


:: Different sync package(s) in repository extra x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                          abseil-cpp         20250814.1-1         20260107.1-1
                               afl++              4.35c-2              4.40c-1
                                agda          2.6.4.3-119          2.6.4.3-121
                          aliyun-cli              3.2.9-1              3.3.3-1
                              allure         0.11.0.0-317         0.11.0.0-320
                          amdgpu_top             0.11.2-1             0.11.3-1
                       android-tools            35.0.2-23            35.0.2-24
                          apache-orc              2.3.0-2              2.3.0-3
                                apko             1.1.16-1              1.2.0-1
                               arbtt         0.12.0.3-185         0.12.0.3-187
                             arch-hs            0.12.1-66            0.12.1-70
                      argo-workflows              4.0.2-1              4.0.3-1
                               arrow             23.0.1-2             23.0.1-3
                             astroid               0.17-8               0.17-9
                           astroterm             1.0.10-1              1.1.0-1
                           aws-vault              7.9.7-1             7.9.13-1
                              azcopy            10.32.1-1            10.32.2-1
                       bbswitch-dkms              0.8-806              0.8-807
                       bcachefs-dkms           3:1.37.3-1           3:1.37.4-1
                      bcachefs-tools           3:1.37.3-1           3:1.37.4-1
                               beets              2.7.1-1              2.8.0-1
                               bftpd                6.3-1                6.6-1
                              bloaty               1.1-22               1.1-23
                            bpftrace             0.25.0-1             0.25.1-1
                                brat              0.9.0-2             0.10.0-1
                                 bun             1.3.11-1             1.3.11-2
                               byobu               6.14-1               6.15-1
                       cabal-install          3.10.3.0-15          3.10.3.0-18
                          cabal-plan          0.7.3.0-128          0.7.3.0-130
                      cargo-binstall             1.17.8-2             1.17.9-1
                         cargo-insta             1.47.0-1             1.47.2-1
                        cargo-update             18.2.0-2             19.0.1-1
                             castxml              0.7.0-1              0.7.0-2
                           cbor-tool          0.2.3.0-124          0.2.3.0-126
                              ccache             4.13.1-1             4.13.2-1
                               cgrep             8.1.0-94             8.1.0-97
                              chatty              0.8.9-1              0.8.9-2
                          cherrytree              1.6.3-1              1.6.3-2
                           clash-ghc             1.8.2-97            1.8.2-100
                          cockatrice             2.10.3-1             2.10.3-2
                               crash              9.0.1-1              9.0.1-2
                             cryptol             3.3.0-47             3.3.0-50
                                 cue             0.15.4-1             0.16.0-1
                    curl-impersonate              1.5.1-1              1.5.2-1
                                cyme             2.2.11-2              2.3.0-1
                               darcs           2.18.5-191           2.18.5-194
                             dbeaver             26.0.0-1             26.0.1-1
                     deepin-anything             6.2.11-1              7.0.0-2
                deepin-anything-dkms             6.2.11-1              7.0.0-2
                          deepin-api             6.0.35-1             6.0.37-1
                 deepin-app-services             1.0.40-1             1.0.41-1
          deepin-application-manager             1.2.42-1             1.2.44-1
                     deepin-calendar             6.5.17-1             6.5.18-1
                    deepin-clipboard              6.1.7-1              6.1.8-1
                   deepin-compressor              6.5.9-1             6.5.11-1
               deepin-control-center             6.1.13-1             6.1.15-1
                       deepin-daemon             6.1.46-4             6.1.49-1
                deepin-desktop-theme             1.1.16-1             1.1.18-1
             deepin-device-formatter           0.0.1.18-2              1.5.1-1
                         deepin-draw             6.5.25-1             6.5.26-1
                       deepin-editor             6.5.41-1             6.5.42-1
                 deepin-grand-search              5.4.7-3              5.4.9-1
                    deepin-launchpad             2.0.25-3             2.0.26-1
                        deepin-movie          1:5.10.45-1          1:5.10.46-1
                 deepin-network-core             2.0.42-1             2.0.43-1
               deepin-qt5integration             5.7.30-2             6.7.31-1
          deepin-qt5platform-plugins             5.7.30-2             6.7.31-1
               deepin-qt6integration             6.0.48-3             6.7.31-1
          deepin-qt6platform-plugins             6.0.48-3             6.7.31-1
                  deepin-screensaver             5.0.19-2             5.0.20-1
                     deepin-services             1.0.19-1             1.0.21-1
                      deepin-session             2.0.15-2             2.0.17-1
                        deepin-shell             2.0.27-3             2.0.29-1
               deepin-system-monitor             6.5.19-2             6.5.21-1
                     deepin-terminal             6.5.28-3             6.5.29-1
                  deepin-tray-loader             2.0.24-3             2.0.26-1
                        deepin-turbo            0.0.6.2-1            0.0.6.3-1
                     deepin-util-dfm             1.2.29-1             1.2.31-1
                   deepin-wallpapers            1:1.7.8-1           1:1.7.14-1
                      deepin-widgets             6.0.18-2             6.0.20-1
                               dhall            1.42.3-45            1.42.3-48
                          dhall-bash           1.0.41-176           1.0.41-180
                          dhall-docs           1.0.12-168           1.0.12-171
                          dhall-json           1.7.12-172           1.7.12-175
                    dhall-lsp-server            1.1.4-102            1.1.4-106
                          dhall-yaml           1.2.12-177           1.2.12-180
                       diff-so-fancy              1.4.6-1              1.4.8-1
                          diffoscope                313-1                315-1
                             discord          1:0.0.130-1          1:0.0.131-1
                             dovecot              2.4.3-1              2.4.3-2
                               drone             2.28.0-1             2.28.1-1
                           drone-oss             2.28.0-1             2.28.1-1
                            dtk6core           1:6.7.32-2           1:6.7.33-1
                     dtk6declarative           1:6.7.32-2           1:6.7.33-1
                             dtk6gui           1:6.7.32-2           1:6.7.33-1
                             dtk6log             6.7.32-2             6.7.33-1
                          dtk6widget           1:6.7.32-2           1:6.7.33-1
                             dtkcore           1:6.7.32-2           1:6.7.33-1
                      dtkdeclarative           1:6.7.32-2           1:6.7.33-1
                              dtkgui           1:6.7.32-2           1:6.7.33-1
                              dtklog             6.7.32-2             6.7.33-1
                           dtkwidget           1:6.7.32-2           1:6.7.33-1
                               dunst             1.13.1-1             1.13.2-1
                         easyeffects              8.1.7-1              8.1.8-1
                              emptty             0.16.0-1             0.16.1-1
               evolution-data-server             3.58.3-1             3.58.3-2
          evolution-data-server-docs             3.58.3-1             3.58.3-2
                  falcosecurity-libs             0.20.0-9             0.23.1-1
                           fastfetch             2.60.0-1             2.61.0-1
           firefox-developer-edition            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-ach            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-af            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-an            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ar            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-ast            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-az            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-be            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-bg            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-bn            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-br            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-bs            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ca            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-ca-valencia      150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-cak            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-cs            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-cy            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-da            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-de            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-dsb            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-el            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-en-ca            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-en-gb            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-en-us            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-eo            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-ar            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-cl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-es            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-mx            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-et            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-eu            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-fa            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ff            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-fi            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-fr            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-fur            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-fy-nl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-ga-ie            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-gd            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-gl            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-gn            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-gu-in            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-he            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-hi-in            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-hr            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-hsb            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-hu            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-hy-am            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ia            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-id            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-is            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-it            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ja            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ka            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-kab            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-kk            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-km            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-kn            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ko            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-lij            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-lt            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-lv            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-mk            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-mr            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ms            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-my            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-nb-no            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-ne-np            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-nl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-nn-no            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-oc            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-pa-in            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-pl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-pt-br            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-pt-pt            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-rm            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ro            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ru            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-sat            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sc            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-sco            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-si            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sk            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-skr            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sl            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-son            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sq            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sr            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-sv-se            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-szl            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ta            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-te            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-tg            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-th            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-tl            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-tr            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-trs            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-uk            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ur            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-uz            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-vi            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-xh            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-zh-cn            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-zh-tw            150.0b2-1            150.0b3-1
                             freecad             1.0.2-10              1.1.0-2
                      freeciv-common              3.2.2-6              3.2.4-1
                        freeciv-gtk3              3.2.2-6              3.2.4-1
                        freeciv-gtk4              3.2.2-6              3.2.4-1
                          freeciv-qt              3.2.2-6              3.2.4-1
                           ft2-clone               2.12-1               2.13-1
                                 gdb               17.1-2               17.1-3
                          gdb-common               17.1-2               17.1-3
                                gegl             0.4.68-1             0.4.70-1
                          gemini-cli           1:0.35.2-1           1:0.35.3-1
                                gimp              3.2.0-1              3.2.2-1
                           git-annex       10.20251215-14       10.20251215-19
                           git-delta             0.19.1-1             0.19.2-1
                          git-repair       1.20230814-189       1.20230814-190
                               gitit         0.15.1.2-121         0.15.1.2-127
                             glances              4.5.2-2              4.5.3-1
                               glirc            2.40.1-70            2.40.1-74
           globalprotect-openconnect              2.5.1-2              2.5.1-3
                                  gn    0.2324.304bbef6-1    0.2324.304bbef6-2
                      gnuradio-iqbal             0.38.3-2             0.38.3-3
                       golangci-lint             2.11.3-1             2.11.4-1
                         google-glog              0.7.1-1              0.7.1-2
                                grpc             1.78.1-2             1.80.0-1
                            grpc-cli             1.78.1-2             1.80.0-1
                                gvim           9.2.0204-2           9.2.0272-1
                              hamlib              4.6.5-3              4.7.0-1
                           hardinfo2             2.2.16-1             2.2.16-2
                 haskell-adjunctions            4.4.3-102              4.4.4-1
                       haskell-aeson            2.2.1.0-5            2.2.1.0-7
         haskell-aeson-better-errors           0.9.1.3-73           0.9.1.3-75
                haskell-aeson-casing          0.2.0.0-233          0.2.0.0-235
                  haskell-aeson-diff         1.1.0.13-267         1.1.0.13-269
                haskell-aeson-pretty           0.8.10-150           0.8.10-152
                    haskell-aeson-qq            0.8.4-335            0.8.4-337
        haskell-aeson-warning-parser             0.1.1-89             0.1.1-91
                  haskell-aeson-yaml          1.1.0.1-349          1.1.0.1-351
                haskell-apply-refact          0.14.0.0-63          0.14.0.0-64
                    haskell-arch-web             0.3.2-54             0.3.2-58
                    haskell-arithmoi          0.13.2.0-32          0.13.2.0-35
            haskell-attoparsec-aeson            2.2.0.0-7            2.2.0.0-9
                haskell-authenticate          1.3.5.2-250          1.3.5.2-253
          haskell-authenticate-oauth              1.7-373              1.7-375
                         haskell-aws             0.24.2-9            0.24.2-12
              haskell-binary-conduit            1.3.1-588            1.3.1-590
            haskell-binary-instances            1.0.4-161            1.0.4-163
               haskell-binary-tagged            0.3.1-332            0.3.1-334
                      haskell-bitvec           1.1.5.0-43           1.1.5.0-45
                  haskell-bower-json          1.1.0.0-229          1.1.0.0-231
                  haskell-breakpoint           0.1.4.0-20            0.1.5.0-1
                     haskell-butcher          1.3.3.2-508          1.3.3.2-510
                    haskell-bv-sized             1.0.6-96             1.0.6-99
                  haskell-byte-order          0.1.3.1-161          0.1.3.1-163
   haskell-bytestring-strict-builder           0.4.5.8-76           0.4.5.8-78
       haskell-cabal-install-parsers           0.6.1.1-12           0.6.1.1-16
                 haskell-casa-client             0.0.3-32             0.0.3-36
                  haskell-casa-types             0.0.3-24             0.0.3-27
                       haskell-cborg          0.2.10.0-86          0.2.10.0-88
                  haskell-cborg-json          0.2.6.0-101          0.2.6.0-103
                  haskell-cheapskate          0.1.1.2-861          0.1.1.2-864
                    haskell-checkers            0.6.0-257            0.6.0-258
                     haskell-chimera          0.4.1.0-144          0.4.1.0-146
                          haskell-ci            0.16.6-48            0.16.6-52
                    haskell-citeproc           0.8.1.1-84           0.8.1.1-86
                   haskell-clash-lib             1.8.2-97            1.8.2-100
               haskell-clash-prelude             1.8.2-89             1.8.2-92
              haskell-classy-prelude           1.5.0.3-81           1.5.0.3-84
                haskell-coinbase-pro          0.9.3.2-435          0.9.3.2-439
       haskell-commonmark-extensions            0.2.5.6-5            0.2.5.6-6
           haskell-commonmark-pandoc           0.2.2.3-46           0.2.2.3-48
                     haskell-concise          0.1.0.1-660          0.1.0.1-662
                     haskell-conduit          1.3.6.1-133          1.3.6.1-135
               haskell-conduit-extra             1.3.8-76             1.3.8-78
               haskell-conduit-parse          0.2.1.1-311          0.2.1.1-313
               haskell-config-schema          1.3.0.0-234          1.3.0.0-236
          haskell-constraints-extras           0.4.0.2-54           0.4.0.2-56
               haskell-contravariant              1.5.5-6              1.5.6-1
        haskell-contravariant-extras            0.3.5.4-6            0.3.5.4-7
                   haskell-criterion           1.6.3.0-47           1.6.3.0-49
       haskell-criterion-measurement           0.2.3.0-57           0.2.3.0-59
             haskell-crypton-conduit            0.2.3-219            0.2.3-221
          haskell-crypton-connection             0.4.5-26             0.4.5-28
          haskell-cryptonite-conduit            0.2.2-792            0.2.2-794
                         haskell-dav            1.3.4-874            1.3.4-879
                        haskell-dbus             1.3.3-73             1.3.3-76
               haskell-dbus-hslogger          0.1.0.1-676          0.1.0.1-679
              haskell-deferred-folds           0.9.18.8-2           0.9.18.8-4
        haskell-dense-linear-algebra          0.1.0.0-444          0.1.0.0-446
               haskell-dependent-map            0.4.0.1-9           0.4.0.1-11
               haskell-dependent-sum          0.7.2.0-219          0.7.2.0-221
      haskell-dependent-sum-template           0.2.0.2-17           0.2.0.2-19
                       haskell-deque          0.4.4.2-114          0.4.4.2-116
              haskell-deriving-aeson           0.2.10-131           0.2.10-133
                      haskell-docopt          0.7.0.8-151          0.7.0.8-153
                haskell-doctemplates          0.11.0.1-76          0.11.0.1-78
            haskell-doctest-discover          0.2.0.0-213          0.2.0.0-215
                      haskell-either             5.0.3-79             5.0.3-80
                  haskell-enummapset          0.7.3.0-139          0.7.3.0-141
                   haskell-esqueleto           3.5.11.0-8           3.5.11.1-4
                  haskell-fdo-notify            0.3.1-922            0.3.1-925
                        haskell-feed          1.3.2.1-330          1.3.2.1-332
                    haskell-floskell           0.10.8-189           0.10.8-191
                       haskell-focus          1.0.3.2-186          1.0.3.2-188
                       haskell-foldl            1.4.18-93            1.4.18-94
                    haskell-fourmolu           0.13.1.0-5           0.14.0.0-2
                        haskell-free              5.2-124              5.2-125
                    haskell-fsnotify           0.4.4.0-40           0.4.4.0-42
                haskell-generic-data           1.1.0.2-66           1.1.0.2-68
                haskell-generic-lens          2.2.2.0-200          2.2.2.0-202
                   haskell-ghc-check          0.5.0.8-150          0.5.0.8-151
              haskell-ghc-exactprint            1.7.1.0-9           1.7.1.0-10
                      haskell-ghcide           2.2.0.0-16            2.3.0.0-5
           haskell-ghcide-test-utils          1.9.0.0-292          1.9.0.0-299
                          haskell-gi           0.26.16-10           0.26.16-12
                      haskell-gi-atk            2.0.28-38            2.0.28-40
                    haskell-gi-cairo            1.0.30-31            1.0.30-33
          haskell-gi-cairo-connector            0.1.1-313            0.1.1-315
                 haskell-gi-dbusmenu            0.4.14-33            0.4.14-35
             haskell-gi-dbusmenugtk3           0.4.15-130           0.4.15-132
                haskell-gi-freetype2             2.0.5-41             2.0.5-43
                      haskell-gi-gdk            4.0.9-106            4.0.9-108
                     haskell-gi-gdk3            3.0.29-30            3.0.29-32
                  haskell-gi-gdk3x11             3.0.15-6             3.0.16-1
                haskell-gi-gdkpixbuf           2.0.32-142           2.0.32-144
                   haskell-gi-gdkx11            4.0.8-129            4.0.8-131
                      haskell-gi-gio            2.0.38-25            2.0.38-27
                     haskell-gi-glib            2.0.30-59            2.0.30-61
                  haskell-gi-gmodule             2.0.6-43             2.0.6-45
                  haskell-gi-gobject            2.0.31-75            2.0.31-77
                 haskell-gi-graphene             1.0.8-68             1.0.8-70
                      haskell-gi-gsk             4.0.8-55             4.0.8-57
                      haskell-gi-gtk            4.0.11-32            4.0.11-34
                   haskell-gi-gtk-hs           0.3.17-101           0.3.17-103
                     haskell-gi-gtk3            3.0.43-13            3.0.43-15
                 haskell-gi-harfbuzz           0.0.10-147           0.0.10-149
                    haskell-gi-pango            1.0.30-36            1.0.30-38
                     haskell-gi-xlib            2.0.14-93            2.0.14-95
                     haskell-git-lfs             1.2.5-78             1.2.5-81
                     haskell-githash          0.1.6.3-345          0.1.6.3-348
                haskell-gtk-sni-tray          0.1.8.1-394          0.1.8.1-397
                   haskell-gtk-strut          0.1.3.2-348          0.1.3.2-350
                  haskell-hackage-db            2.1.3-191            2.1.3-193
            haskell-hackage-security           0.6.3.2-13           0.6.3.2-15
             haskell-haddock-library           1.11.0-184           1.11.0-188
                     haskell-hadrian     0.1.0.0+9.6.6-16     0.1.0.0+9.6.6-19
                      haskell-hakyll          4.16.4.0-25          4.16.4.0-31
            haskell-happstack-server             7.9.3-24             7.9.3-25
                       haskell-hasql          1.5.0.5-114            1.6.1.1-2
    haskell-hasql-dynamic-statements          0.3.1.1-280            0.3.1.2-2
             haskell-hasql-implicits          0.1.0.5-316          0.1.0.5-320
         haskell-hasql-notifications           0.2.0.5-89           0.2.0.5-93
                  haskell-hasql-pool          0.5.2.2-399            0.8.0.2-2
           haskell-hasql-transaction          1.0.1.1-421            1.0.1.2-2
            haskell-hedgehog-classes          0.2.5.4-216          0.2.5.4-218
                        haskell-here           1.2.14-135           1.2.14-136
                    haskell-hie-bios           0.12.0-159           0.12.0-161
                 haskell-hledger-lib               1.52-6               1.52-8
haskell-hls-alternate-number-format-plugin     2.2.0.0-16            2.3.0.0-5
        haskell-hls-cabal-fmt-plugin           2.2.0.0-16            2.3.0.0-5
            haskell-hls-cabal-plugin           2.2.0.0-16            2.3.0.0-5
   haskell-hls-call-hierarchy-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-change-type-signature-plugin       2.2.0.0-16            2.3.0.0-5
            haskell-hls-class-plugin           2.2.0.0-16            2.3.0.0-5
       haskell-hls-code-range-plugin           2.2.0.0-16            2.3.0.0-5
             haskell-hls-eval-plugin           2.2.0.0-16            2.3.0.0-5
  haskell-hls-explicit-fixity-plugin           2.2.0.0-16            2.3.0.0-5
 haskell-hls-explicit-imports-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-explicit-record-fields-plugin      2.2.0.0-16            2.3.0.0-5
         haskell-hls-floskell-plugin           2.2.0.0-16            2.3.0.0-5
         haskell-hls-fourmolu-plugin           2.2.0.0-17            2.3.0.0-5
             haskell-hls-gadt-plugin           2.2.0.0-17            2.3.0.0-5
                   haskell-hls-graph           2.2.0.0-12            2.3.0.0-4
            haskell-hls-hlint-plugin           2.2.0.0-16            2.3.0.0-5
      haskell-hls-module-name-plugin           2.2.0.0-16            2.3.0.0-5
           haskell-hls-ormolu-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-overloaded-record-dot-plugin       2.2.0.0-16            2.3.0.0-5
              haskell-hls-plugin-api           2.2.0.0-15            2.3.0.0-4
          haskell-hls-pragmas-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-qualify-imported-names-plugin      2.2.0.0-16            2.3.0.0-5
         haskell-hls-refactor-plugin           2.2.0.0-17            2.3.0.0-5
           haskell-hls-rename-plugin           2.2.0.0-17            2.3.0.0-5
           haskell-hls-retrie-plugin           2.2.0.0-17            2.3.0.0-5
           haskell-hls-splice-plugin           2.2.0.0-17            2.3.0.0-5
  haskell-hls-stylish-haskell-plugin           2.2.0.0-16            2.3.0.0-5
              haskell-hls-test-utils           2.2.0.0-16            2.3.0.0-5
                     haskell-hoauth2            2.14.0-16            2.14.0-19
                    haskell-hopenpgp           2.10.1-121           2.10.1-124
                       haskell-hpack            0.38.0-21            0.38.0-24
                       haskell-hslua            2.3.0-203            2.3.0-206
                 haskell-hslua-aeson           2.3.1.1-51           2.3.1.1-54
               haskell-hslua-classes             2.3.1-30             2.3.1-31
                  haskell-hslua-core             2.3.2-34             2.3.2-35
                  haskell-hslua-list             1.1.4-29             1.1.4-30
           haskell-hslua-marshalling            2.3.1-141            2.3.1-142
      haskell-hslua-module-doclayout             1.2.0-11             1.2.0-14
           haskell-hslua-module-path            1.1.1-105            1.1.1-108
         haskell-hslua-module-system             1.1.2-54             1.1.2-55
           haskell-hslua-module-text          1.1.0.1-168          1.1.0.1-169
        haskell-hslua-module-version            1.1.1-147            1.1.1-150
            haskell-hslua-module-zip             1.1.3-47             1.1.3-48
     haskell-hslua-objectorientation             2.3.1-49             2.3.1-50
             haskell-hslua-packaging            2.3.1-151            2.3.1-152
                  haskell-hslua-repl            0.1.2-147            0.1.2-148
                haskell-hslua-typing            0.1.1-143            0.1.1-144
                   haskell-hspec-wai           0.11.1-639           0.11.1-642
              haskell-hspec-wai-json           0.11.0-710           0.11.0-713
                haskell-hsyaml-aeson           0.2.0.2-58           0.2.0.2-60
                         haskell-htf          0.15.0.2-68          0.15.0.2-70
                haskell-html-conduit          1.3.2.2-388          1.3.2.2-390
                        haskell-http         4000.4.1-398         4000.4.1-401
                 haskell-http-client            0.7.19-58            0.7.19-60
      haskell-http-client-restricted            0.1.0-198            0.1.0-201
             haskell-http-client-tls          0.3.6.4-137          0.3.6.4-140
                haskell-http-conduit          2.3.9.1-197          2.3.9.1-200
               haskell-http-download          0.2.1.0-327          0.2.1.0-330
                haskell-http-streams          0.8.9.9-292          0.8.9.9-295
                       haskell-http2             5.1.0-17             5.1.0-19
                       haskell-http3             0.0.9-21             0.0.9-23
                  haskell-httpd-shed          0.4.1.2-108          0.4.1.2-109
               haskell-hw-fingertree          0.1.2.1-194          0.1.2.1-196
           haskell-hw-hspec-hedgehog          0.1.1.1-213          0.1.1.1-215
                     haskell-hw-prim          0.6.3.2-213          0.6.3.2-215
                         haskell-hxt         9.3.1.22-234         9.3.1.22-235
                haskell-implicit-hie           0.1.4.0-78           0.1.4.0-80
         haskell-implicit-hie-cradle          0.5.0.1-192          0.5.0.1-194
          haskell-incremental-parser            0.5.1-166            0.5.1-167
   haskell-insert-ordered-containers          0.2.5.3-200          0.2.5.3-203
                 haskell-interpolate            0.2.1-468            0.2.1-469
    haskell-interpolatedstring-perl6            1.0.2-405            1.0.2-406
                   haskell-invariant             0.6.4-94             0.6.4-95
                       haskell-ipynb              0.2-283              0.2-285
              haskell-ipython-kernel           0.12.0.0-8          0.12.0.0-10
           haskell-isomorphism-class             0.1.1-92             0.1.1-94
                 haskell-ixset-typed          0.5.1.0-314          0.5.1.0-316
                        haskell-jose             0.10-256             0.10-259
                   haskell-js-jquery            3.7.1-107            3.7.1-110
              haskell-kan-extensions             5.2.7-85             5.2.7-87
                        haskell-keys             3.12.5-5             3.12.5-6
                    haskell-kvitable            1.1.1.1-7           1.1.1.1-10
           haskell-lambdabot-trusted          5.3.1.2-244          5.3.1.2-247
                  haskell-lambdahack         0.11.0.1-190         0.11.0.1-193
             haskell-language-server           2.2.0.0-19            2.3.0.0-5
                    haskell-lattices             2.2.1-96             2.2.1-97
                        haskell-lens              5.3.4-1              5.3.4-3
                 haskell-lens-action            0.2.6-329            0.2.6-331
                  haskell-lens-aeson            1.2.3-202            1.2.3-205
                     haskell-libyaml            0.1.4-161            0.1.4-163
                      haskell-linear            1.23.2-47            1.23.2-49
                      haskell-list-t           1.0.5.7-63           1.0.5.7-65
                    haskell-lrucache           1.2.0.1-26           1.2.0.1-27
                         haskell-lsp           2.2.0.0-10           2.2.0.0-13
                    haskell-lsp-test          0.16.0.0-11          0.16.0.0-14
                   haskell-lsp-types            2.0.2.0-9           2.0.2.0-12
               haskell-lua-arbitrary          1.0.1.1-135            1.0.1.2-1
                  haskell-lumberjack          1.0.3.0-172          1.0.3.0-173
                  haskell-microaeson           0.1.0.3-43           0.1.0.3-45
             haskell-microlens-aeson            2.5.2-151            2.5.2-153
                 haskell-microstache          1.0.2.3-212          1.0.2.3-214
                  haskell-mime-types            0.1.2.0-4            0.1.2.1-1
                       haskell-mmark          0.0.7.6-346          0.0.7.6-348
                         haskell-mod           0.2.1.0-30           0.2.1.0-32
                  haskell-modern-uri          0.3.6.1-147          0.3.6.1-148
              haskell-monad-dijkstra          0.1.1.5-193          0.1.1.5-195
                haskell-monad-logger           0.3.42-113           0.3.42-115
            haskell-mono-traversable         1.0.21.0-135         1.0.21.0-137
  haskell-mono-traversable-instances          0.1.1.0-386          0.1.1.0-389
                    haskell-mustache           2.4.3.1-72           2.4.3.1-76
          haskell-mutable-containers          0.3.4.1-242          0.3.4.1-244
                  haskell-named-text           1.2.2.0-13           1.2.2.0-16
          haskell-neat-interpolation          0.5.1.4-199          0.5.1.4-201
                 haskell-network-uri          2.6.4.2-137          2.6.4.2-138
                        haskell-oeis           0.3.10.2-6           0.3.10.2-9
                   haskell-one-liner              2.1.1-2              2.1.1-3
             haskell-optparse-simple          0.1.1.4-535          0.1.1.4-538
                      haskell-ormolu           0.6.0.0-13           0.6.0.0-15
                       haskell-pager          0.1.1.0-218          0.1.1.0-220
                      haskell-pandoc               3.5-12                3.6-2
           haskell-pandoc-lua-engine             0.3.3-14                0.4-2
          haskell-pandoc-lua-marshal             0.2.9-15              0.3.0-1
               haskell-pandoc-server           0.1.0.10-3           0.1.0.10-9
                haskell-pandoc-types           1.23.1-164           1.23.1-166
                      haskell-pantry           0.8.2.2-32           0.8.2.2-36
         haskell-parameterized-utils           2.1.11.0-9          2.1.11.0-12
                        haskell-path              0.9.6-9             0.9.6-11
                     haskell-path-io            1.8.2-140            1.8.2-142
                  haskell-persistent          2.14.5.2-58          2.14.5.2-61
            haskell-persistent-mysql         2.13.1.5-100         2.13.1.5-103
       haskell-persistent-postgresql          2.13.5.2-24          2.13.5.2-27
               haskell-persistent-qq          2.12.0.7-73          2.12.0.7-76
           haskell-persistent-sqlite          2.13.1.1-66          2.13.1.1-69
             haskell-persistent-test         2.13.1.3-208         2.13.1.3-211
                  haskell-pipes-http            1.0.6-770            1.0.6-773
                     haskell-pointed            5.0.5-125            5.0.5-127
           haskell-postgresql-binary           0.12.5-267           0.12.5-270
           haskell-postgresql-simple          0.6.5.1-112          0.6.5.1-114
        haskell-prettyprinter-interp          0.2.0.0-157          0.2.0.0-158
                   haskell-prim-uniq              0.2-250              0.2-252
            haskell-primitive-extras         0.10.2.2-131         0.10.2.2-134
                 haskell-profunctors             5.6.3-82             5.6.3-83
            haskell-project-template          0.2.1.0-508          0.2.1.0-510
                         haskell-ptr         0.16.8.7-128         0.16.8.7-130
                        haskell-quic             0.1.27-3             0.1.27-5
          haskell-quickcheck-classes          0.6.5.0-342          0.6.5.0-344
                         haskell-ral             0.2.2-54             0.2.2-56
                      haskell-rebase            1.20.2-14            1.20.2-16
                   haskell-recaptcha          0.1.0.4-379          0.1.0.4-382
           haskell-recursion-schemes            5.2.3-141            5.2.3-142
                    haskell-reducers           3.12.5-125           3.12.5-126
                    haskell-refinery          0.4.0.0-317          0.4.0.0-318
                         haskell-req            3.13.4-32            3.13.4-35
                        haskell-rere           0.2.0.2-13           0.2.0.2-15
                    haskell-rerebase            1.20.2-14            1.20.2-16
                      haskell-retrie            1.2.3-159            1.2.3-161
                 haskell-rio-orphans          0.1.2.0-486          0.1.2.0-488
             haskell-rio-prettyprint           0.1.8.0-69           0.1.8.0-71
                   haskell-row-types           1.0.1.2-66           1.0.1.2-68
                    haskell-safecopy          0.10.4.3-57          0.10.4.3-59
                       haskell-sandi              0.5-597              0.5-599
                    haskell-sandwich           0.2.2.0-20           0.2.2.0-22
                      haskell-scotty             0.22-203             0.22-206
                        haskell-sdl2          2.5.5.1-128          2.5.5.1-131
                    haskell-sdl2-ttf            2.1.3-278            2.1.3-281
                   haskell-semialign             1.3.1-58             1.3.1-59
               haskell-semigroupoids              6.0.2-3              6.0.2-4
                   haskell-serialise          0.2.6.1-174          0.2.6.1-176
                     haskell-servant          0.20.3.0-52          0.20.3.0-54
              haskell-servant-client          0.20.3.0-67          0.20.3.0-71
         haskell-servant-client-core          0.20.3.0-52          0.20.3.0-54
              haskell-servant-server          0.20.3.0-67          0.20.3.0-70
             haskell-servant-swagger            1.2.1-153            1.2.1-156
                       haskell-shake           0.19.6-387           0.19.6-390
                 haskell-shakespeare             2.1.7-14            2.1.7.1-2
             haskell-simple-sendfile           0.2.32-196           0.2.32-198
                 haskell-skylighting             0.14.4-3             0.14.4-5
            haskell-skylighting-core             0.14.4-3             0.14.4-5
     haskell-skylighting-format-ansi              0.1-293              0.1-295
haskell-skylighting-format-blaze-html         0.1.1.3-147          0.1.1.3-149
  haskell-skylighting-format-context          0.1.0.2-257          0.1.0.2-259
    haskell-skylighting-format-latex              0.1-292              0.1-294
                   haskell-snap-core          1.0.5.1-210          1.0.5.1-211
                 haskell-snap-server          1.1.2.1-362          1.1.2.1-365
                   haskell-sourcemap            0.1.7-299            0.1.7-301
                    haskell-src-meta            0.8.15-90            0.8.15-91
                  haskell-statistics           0.16.4.0-9          0.16.4.0-11
        haskell-status-notifier-item            0.3.2.0-2            0.3.2.0-5
              haskell-stm-containers          1.2.1.1-160          1.2.1.1-164
                    haskell-stm-hamt          1.2.1.1-132              1.2.2-3
                       haskell-store           0.7.20-137           0.7.20-139
                     haskell-streams            3.3.3-125            3.3.3-127
                 haskell-strict-list          0.1.7.6-132          0.1.7.6-134
          haskell-string-interpolate          0.3.4.0-143          0.3.4.0-144
                  haskell-structured            0.1.1-319            0.1.1-321
                    haskell-summoner            2.1.0.0-2            2.1.0.0-6
                haskell-summoner-tui            2.1.0.0-2            2.1.0.0-6
                    haskell-swagger2            2.8.10-98           2.8.10-101
           haskell-tagstream-conduit            0.5.6-536            0.5.6-538
haskell-tamarin-prover-accountability            1.12.0-6             1.12.0-8
       haskell-tamarin-prover-export             1.12.0-6             1.12.0-8
        haskell-tamarin-prover-sapic             1.12.0-6             1.12.0-8
         haskell-tamarin-prover-term             1.12.0-6             1.12.0-8
       haskell-tamarin-prover-theory             1.12.0-6             1.12.0-8
        haskell-tamarin-prover-utils             1.12.0-6             1.12.0-8
                 haskell-tar-conduit            0.4.1-191            0.4.1-193
             haskell-tasty-checklist           1.0.8.0-10           1.0.8.0-13
                 haskell-tasty-hslua            1.1.1-139            1.1.1-140
                   haskell-tasty-lua           1.1.1.1-72           1.1.1.1-73
                 haskell-tasty-sugar           2.2.2.1-85           2.2.2.1-88
                     haskell-tdigest            0.3.1-150            0.3.1-152
                     haskell-texmath         0.12.8.11-15          0.12.8.12-1
                haskell-text-builder            0.6.7-283            0.6.7-285
            haskell-text-builder-dev          0.3.3.2-244          0.3.3.2-246
                   haskell-th-compat             0.1.6-87              0.1.7-1
                  haskell-th-desugar               1.16-3               1.16-4
                      haskell-th-env            0.1.1-164            0.1.1-165
                  haskell-th-orphans            0.13.17-4            0.13.17-5
                haskell-th-utilities          0.2.5.2-102          0.2.5.2-103
                         haskell-tls             2.0.6-71             2.0.6-73
         haskell-tls-session-manager             0.0.6-21             0.0.6-23
                   haskell-tree-diff          0.3.0.1-229              0.3.1-3
                    haskell-trifecta            2.1.4-174            2.1.4-176
                      haskell-turtle            1.6.2-161            1.6.2-162
                       haskell-typst               0.6-19              0.6.1-1
               haskell-typst-symbols              0.1.6-2              0.1.7-1
        haskell-uri-bytestring-aeson          0.1.0.9-133          0.1.0.9-135
                  haskell-uri-encode          1.5.0.7-319          1.5.0.7-320
                         haskell-vec             0.5.1-52             0.5.1-54
           haskell-vector-algorithms          0.9.1.0-123          0.9.1.0-125
              haskell-vector-builder          0.3.8.6-139          0.3.8.6-141
            haskell-vector-instances             3.4.3-77             3.4.3-79
                haskell-vector-sized            1.6.1-155            1.6.1-157
            haskell-wai-app-file-cgi            3.1.11-20            3.1.11-23
              haskell-wai-app-static            3.1.9-233            3.1.9-236
                 haskell-wai-conduit          3.0.0.4-714          3.0.0.4-716
                   haskell-wai-extra            3.1.18-41            3.1.18-44
          haskell-wai-handler-launch          3.0.3.1-811          3.0.3.1-814
             haskell-wai-http2-extra            0.1.3-376            0.1.3-379
       haskell-wai-middleware-static            0.9.3-192            0.9.3-195
                        haskell-warp             3.4.0-19             3.4.0-22
                   haskell-warp-quic            0.0.0-435            0.0.0-438
                    haskell-warp-tls            3.4.9-191            3.4.9-194
                       haskell-weigh           0.0.18-122           0.0.18-124
                       haskell-what4               1.6-78               1.6-81
                   haskell-wide-word           0.1.8.1-33           0.1.8.1-35
                   haskell-with-utf8          1.1.0.0-131          1.1.0.0-132
            haskell-wl-pprint-extras          3.5.0.5-560          3.5.0.5-561
          haskell-wl-pprint-terminfo          3.7.1.4-560          3.7.1.4-561
                        haskell-wreq            0.5.4.4-3            0.5.4.4-7
                        haskell-wuss           2.0.1.6-31           2.0.1.6-33
                      haskell-xcffib             1.6.1-14             1.6.1-15
           haskell-xdg-desktop-entry            0.1.1.3-2            0.1.1.3-3
                 haskell-xml-conduit          1.9.1.4-150          1.9.1.4-152
                  haskell-xml-hamlet            0.5.0.3-8           0.5.0.3-11
                      haskell-xmlgen          0.6.2.2-191          0.6.2.2-192
                haskell-xss-sanitize          0.3.7.2-131          0.3.7.2-132
                        haskell-yaml        0.11.11.2-205        0.11.11.2-207
                       haskell-yesod          1.6.2.1-460          1.6.2.1-464
                  haskell-yesod-auth         1.6.11.3-282         1.6.11.3-286
                  haskell-yesod-core         1.6.27.1-115         1.6.27.1-119
                  haskell-yesod-form            1.7.9.2-2            1.7.9.2-6
            haskell-yesod-persistent          1.6.0.8-520          1.6.0.8-524
                haskell-yesod-static          1.6.1.0-979          1.6.1.0-983
                  haskell-yesod-test           1.6.23-134           1.6.23-138
                           hedgewars             1.0.3-19             1.0.3-21
                               hefur               1.0-35               1.0-36
                               hepmc              3.3.1-7              3.3.1-8
                          hepmc-docs              3.3.1-7              3.3.1-8
                             hindent              6.1.1-6              6.1.1-8
                               hiprt      3.1.0.cb09c56-2      3.1.0.cb09c56-3
                             hledger               1.52-6              1.52-10
                        hledger-iadd            1.3.22-17            1.3.22-19
                          hledger-ui               1.52-7              1.52-11
                         hledger-web              1.52-10              1.52-14
                               hlint              3.6.1-8             3.6.1-10
                              hoogle         5.0.18.4-265         5.0.18.4-268
                      hopenpgp-tools           0.23.11-40           0.23.11-44
              hsa-amd-aqlprofile-bin              7.1.0-1              7.1.0-2
                           hslua-cli             1.4.3-87             1.4.3-88
                       i3status-rust             0.36.0-1             0.36.1-1
                               iaito              5.9.9-1              6.1.2-1
                      ibus-libpinyin             1.16.0-4             1.16.1-1
                               idris            1.3.4-478            1.3.4-481
                            ihaskell           0.13.0.0-9          0.13.0.0-12
                               incus             6.22.0-1             6.23.0-1
                         incus-tools             6.22.0-1             6.23.0-1
                              jasper              4.2.8-1              4.2.9-1
                          jasper-doc              4.2.8-1              4.2.9-1
                     jellyfin-ffmpeg          1:7.1.3p3-2          1:7.1.3p4-1
                                jolt              1.2.0-2              1.2.0-3
                               kicad             10.0.0-1             10.0.0-2
                          kitinerary            25.12.3-2            25.12.3-3
                              kmonad             0.4.4-89             0.4.4-91
                       kosmindoormap            25.12.3-1            25.12.3-2
                   libedataserverui4             3.58.3-1             3.58.3-2
                               libhx                5.3-1                5.4-1
              libperconaserverclient            8.4.8_8-1            8.4.8_8-2
                      libphonenumber           1:9.0.27-1           1:9.0.27-2
                            libsbsms              2.3.0-5              2.3.0-6
                           libsigrok             0.5.2-25             0.5.2-26
                           libtg_owt    0.git33.26068e2-1    0.git33.26068e2-2
                              libvlc             3.0.22-1             3.0.22-2
                              libvpx             1.16.0-2             1.16.0-3
                      libwireplumber             0.5.13-2             0.5.14-1
                              libwmf             0.2.13-4             0.2.14-1
                              libxdp              1.6.2-1              1.6.3-1
                          lincity-ng             2.14.2-2             2.14.2-3
                           lostfiles               4.14-1               4.15-1
                        lua-luarocks             3.13.0-4             3.13.0-5
                      lua51-luarocks             3.13.0-4             3.13.0-5
                      lua52-luarocks             3.13.0-4             3.13.0-5
                      lua53-luarocks             3.13.0-4             3.13.0-5
                      lua54-luarocks             3.13.0-4             3.13.0-5
                              luajit2.1.1774638290+fbb36bb-12.1.1774896198+18b087c-1
                            luarocks             3.13.0-4             3.13.0-5
                                mako             1.10.0-1             1.11.0-1
                              marble            25.12.3-1            25.12.3-2
                       marble-behaim            25.12.3-1            25.12.3-2
                       marble-common            25.12.3-1            25.12.3-2
                         marble-maps            25.12.3-1            25.12.3-2
                           marble-qt            25.12.3-1            25.12.3-2
                              maxima             5.49.0-7             5.49.0-8
                          maxima-ecl             5.49.0-7             5.49.0-8
                          maxima-fas             5.49.0-7             5.49.0-8
                         maxima-sbcl             5.49.0-7             5.49.0-8
                             melange             0.46.1-1             0.47.0-1
                          merkaartor            0.20.0-20            0.20.0-21
                               mgard              1.6.0-5              1.6.0-6
                           mighttpd2             4.0.4-25             4.0.4-28
                            migraphx              7.2.0-1              7.2.0-2
                           miniupnpd              2.3.9-2             2.3.10-1
                                mise           2026.3.8-1          2026.3.17-1
                               mixxx              2.5.4-2              2.5.4-3
                     mkdocs-material              9.7.5-1              9.7.6-1
                                moor             2.11.1-1             2.12.0-1
                                mosh             1.4.0-28             1.4.0-29
                           mosquitto             2.0.22-2              2.1.2-1
                              mumble            1.5.857-5            1.5.857-6
                       mumble-server            1.5.857-5            1.5.857-6
                              nageru              2.3.2-2              2.3.2-3
                                ncnn           20260113-3           20260113-4
                               ndctl                 82-1                 83-1
                             neovide             0.15.2-2             0.16.0-1
                              neovim             0.11.6-1             0.11.7-1
                             netdata              2.9.0-1              2.9.0-2
               netfilter-fullconenat      r73.0cf3b48-503      r73.0cf3b48-504
                    nextcloud-client           2:33.0.0-1           2:33.0.1-1
                             ngspice               45.2-2                 46-1
                              nickel             1.16.0-2             1.16.0-3
                         nickel-docs             1.16.0-2             1.16.0-3
              nickel-language-server             1.16.0-2             1.16.0-3
                         nodejs-yaml              2.3.1-1              2.3.2-1
                   npm-check-updates             19.5.0-1             19.6.0-1
                                nrpe              4.1.1-1              4.1.2-1
                              nsjail               3.4-22               3.4-23
                              ollama             0.18.3-1             0.19.0-1
                         ollama-cuda             0.18.3-1             0.19.0-1
                         ollama-docs             0.18.3-1             0.19.0-1
                         ollama-rocm             0.18.3-1             0.19.0-1
                       ollama-vulkan             0.18.3-1             0.19.0-1
                                onnx           1:1.20.1-1           1:1.20.1-2
                     onnxruntime-cpu             1.24.4-3             1.24.4-4
                    onnxruntime-cuda             1.24.4-3             1.24.4-4
                onnxruntime-opt-cuda             1.24.4-3             1.24.4-4
                onnxruntime-opt-rocm             1.24.4-3             1.24.4-4
                    onnxruntime-rocm             1.24.4-3             1.24.4-4
                   open-policy-agent             1.15.0-1             1.15.1-1
                            opencode              1.3.3-1              1.3.8-1
                              opencv             4.13.0-3             4.13.0-4
                         opencv-cuda             4.13.0-3             4.13.0-4
                      opencv-samples             4.13.0-3             4.13.0-4
                             openrgb             1.0rc2-5             1.0rc2-6
                          pandoc-cli               3.5-18                3.6-2
                     pandoc-crossref           0.3.19-182           0.3.19-188
                         pandoc-plot            1.9.1-256            1.9.1-263
                         pandora_box             0.20.0-1             0.20.1-1
                            paraview             6.0.1-10             6.0.1-11
                            pd-sfizz             1.2.3-12             1.2.3-13
                      percona-server            8.4.8_8-1            8.4.8_8-2
              percona-server-clients            8.4.8_8-1            8.4.8_8-2
             perl-business-isbn-data       20260325.001-1       20260328.001-1
                         perl-libwww               6.81-2               6.82-1
                     perl-xml-parser               2.48-1               2.49-1
                            php-grpc             1.78.1-2             1.80.0-1
                     php-legacy-grpc             1.78.1-2             1.80.0-1
                     platformio-core             6.1.19-1             6.1.19-3
                platformio-core-udev             6.1.19-1             6.1.19-3
                      podman-desktop             1.25.1-1             1.26.2-1
                           postgrest           10.0.0-532             10.1.0-2
                            protobuf               33.1-4               34.1-1
                          protobuf-c              1.5.2-8              1.5.2-9
                      proton-vpn-cli              0.1.7-1              0.1.8-1
                  proton-vpn-gtk-app             4.15.0-1             4.15.1-1
                   protonmail-bridge             3.23.1-1             3.23.1-2
              protonmail-bridge-core             3.23.1-1             3.23.1-2
                        prusa-slicer              2.9.4-7              2.9.4-8
                           pt2-clone               1.85-1               1.87-1
                     python-cairosvg              2.8.2-1              2.9.0-1
                 python-cinderclient              9.7.0-1              9.8.0-1
                   python-cloudflare             2.15.1-1             2.16.0-1
               python-configargparse              1.7.3-1              1.7.4-1
                    python-curl_cffi             0.14.0-6             0.14.0-7
                     python-deepdiff              8.1.1-1              8.2.0-1
                     python-eth-hash              0.7.1-1              0.8.0-1
                        python-faker             40.9.0-1            40.10.0-1
                  python-fastnumbers              5.1.1-2              5.1.1-3
                     python-flasgger            0.9.7.1-7                    -
                python-flask-restful             0.3.10-6                    -
                        python-gdstk             0.9.46-1             0.9.47-1
     python-googleapis-common-protos             1.73.0-1             1.73.1-1
                       python-grpcio             1.78.1-2             1.80.0-1
                 python-grpcio-tools             1.78.1-2             1.80.0-1
                     python-identify             2.6.17-1             2.6.18-2
           python-importlib-metadata              8.7.1-3              9.0.0-1
                  python-json-logger              4.0.0-1              4.1.0-1
                         python-lmdb              2.1.1-1              2.2.0-1
                      python-mockito              2.0.0-1              2.0.1-1
                     python-narwhals             2.18.0-1             2.18.1-1
                        python-numpy              2.4.3-1              2.4.4-1
                         python-onnx           1:1.20.1-1           1:1.20.1-2
              python-onnxruntime-cpu             1.24.4-3             1.24.4-4
             python-onnxruntime-cuda             1.24.4-3             1.24.4-4
         python-onnxruntime-opt-cuda             1.24.4-3             1.24.4-4
         python-onnxruntime-opt-rocm             1.24.4-3             1.24.4-4
             python-onnxruntime-rocm             1.24.4-3             1.24.4-4
                       python-opencv             4.13.0-3             4.13.0-4
                  python-opencv-cuda             4.13.0-3             4.13.0-4
              python-openstackclient              8.0.0-1              8.1.0-1
                 python-openstacksdk              4.4.0-2              4.5.0-1
                       python-orjson             3.11.7-1             3.11.7-2
                    python-oslo-i18n              6.7.1-1              6.7.2-1
                      python-plexapi             4.18.0-1             4.18.1-1
                      python-protego              0.4.0-1              0.5.0-1
                     python-protobuf               33.1-4               34.1-1
          python-proton-vpn-api-core             4.16.0-1             4.17.2-1
                 python-pychromecast             14.0.9-4            14.0.10-1
                python-pydantic-core           3:2.41.5-3           3:2.41.5-4
                       python-pygit2             1.19.1-2             1.19.2-1
                     python-pypandoc             1.16.2-1               1.17-1
                     python-pypubsub             4.0.3-11              4.0.4-1
                       python-pysdl3           0.9.10b0-1           0.9.11b0-1
                      python-pytorch             2.10.0-3             2.10.0-4
                 python-pytorch-cuda             2.10.0-3             2.10.0-4
                  python-pytorch-opt             2.10.0-3             2.10.0-4
             python-pytorch-opt-cuda             2.10.0-3             2.10.0-4
             python-pytorch-opt-rocm             2.10.0-3             2.10.0-4
                 python-pytorch-rocm             2.10.0-3             2.10.0-4
                        python-regex          2026.2.28-1          2026.3.32-1
                     python-requests             2.32.5-4             2.33.1-1
              python-setuptools-rust             1.12.0-3             1.12.1-1
                        python-sybil              6.1.1-2              7.0.0-1
                    python-testtools              2.8.3-2              2.8.4-1
                      python-textual              8.1.1-1              8.2.1-1
                        python-tomli              2.4.0-1              2.4.1-1
                          python-tox             4.32.0-1             4.33.0-1
                       python-triton              3.5.1-3              3.5.1-4
                        python-urwid              3.0.5-1              4.0.0-1
                   python-validators             0.30.0-1             0.31.0-1
                        python-w3lib              2.3.0-2              2.3.1-1
                     python-werkzeug              3.1.5-1              3.1.6-1
                    python-z3-solver             4.15.4-2             4.16.0-1
                                qgis              4.0.0-1              4.0.0-2
                            qt6-grpc             6.11.0-1             6.11.0-2
                          quickshell              0.2.1-5              0.2.1-6
                           qwen-code             0.13.1-1             0.13.2-1
                            r2ghidra              5.9.8-1              6.1.2-1
                             radare2              5.9.8-1              6.1.2-1
                               razor               2.86-3               2.87-2
                                 re2       2:2025.11.05-1       2:2025.11.05-3
                              reaper               7.66-1               7.67-1
                               rizin              0.8.1-2              0.8.2-1
                               rocal              7.2.0-1              7.2.0-2
                          rofi-emoji              4.1.0-2              4.1.0-3
                          rpi-imager              2.0.6-2              2.0.6-3
                          rubberband              4.0.0-1              4.0.0-2
                   rubberband-ladspa              4.0.0-1              4.0.0-2
                      rubberband-lv2              4.0.0-1              4.0.0-2
                     rubberband-vamp              4.0.0-1              4.0.0-2
                    ruby-addressable              2.8.8-1              2.8.9-1
                          ruby-async             2.34.0-1             2.38.1-1
                ruby-async-container             0.31.0-1             0.34.4-1
                     ruby-async-pool             0.11.1-1             0.11.2-1
                  ruby-async-service             0.19.1-1             0.21.0-1
                     ruby-chef-utils            19.2.27-1            19.2.32-1
                ruby-google-protobuf               33.1-4               34.1-1
                           ruby-grpc             1.78.1-1             1.80.0-1
                       ruby-io-event             1.14.2-1             1.14.5-1
                         ruby-loofah             2.25.0-1             2.25.1-1
                            ruby-lsp             0.26.6-1             0.26.9-1
                       ruby-maxitest              6.1.0-1              6.2.0-1
            ruby-net-http-persistent              4.0.7-1              4.0.8-1
                  ruby-protocol-http             0.59.0-1             0.60.0-1
                  ruby-protocol-rack             0.21.1-1             0.22.0-1
                  ruby-public_suffix              7.0.2-1              7.0.5-1
           ruby-rails-html-sanitizer              1.6.2-3              1.7.0-1
            ruby-repl_type_completor             0.1.13-1             0.1.15-1
                         ruby-sequel             5.99.0-1            5.101.0-1
                 ruby-sorbet-runtime          0.6.12942-1          0.6.13068-1
                        ruby-sqlite3              2.9.1-1              2.9.2-1
        ruby-sus-fixtures-async-http             0.12.0-1             0.12.1-1
                       ruby-zeitwerk              2.7.3-1              2.7.5-1
                      rustypaste-cli              0.9.4-1              0.9.5-1
                           rz-cutter              2.4.1-5              2.4.1-6
                                sbcl              2.6.2-1              2.6.3-1
                           scap-dkms             0.20.0-9             0.23.1-1
                             scummvm           2026.1.0-1           2026.2.0-1
                          sentry-cli              3.3.4-1              3.3.5-1
                       sentry-native             0.13.3-1             0.13.4-1
                               sfizz              1.2.3-8             1.2.3-10
                           sfizz-lib              1.2.3-8             1.2.3-10
                           sfizz-lv2             1.2.3-12             1.2.3-13
                    sfizz-standalone              1.2.3-8             1.2.3-10
                            sfizz-ui             1.2.3-12             1.2.3-13
                          sfizz-vst3             1.2.3-12             1.2.3-13
                         shadowsocks    3.0.0a.20180219-9                    -
                          shellcheck            0.11.0-79            0.11.0-81
                            skaffold             2.18.0-1             2.18.2-1
                                skim              4.0.1-1              4.2.0-1
                         slicer-udev              2.9.4-7              2.9.4-8
                            smplayer             25.6.0-1             25.6.0-2
                            soapyuhd             0.4.1-14             0.4.1-15
                      spotify-player             0.22.1-1             0.23.0-1
                           sqlcipher             4.13.0-1             4.14.0-1
                            sqlfluff              4.0.4-2              4.1.0-1
                             sslscan              2.2.1-1              2.2.2-1
                               stack          2.9.3.1-118          2.9.3.1-123
                             step-ca             0.29.0-1             0.30.2-1
                          strongswan              6.0.4-2              6.0.5-1
                             stumpwm              24.11-9             24.11-10
                     stylish-haskell          0.14.5.0-11          0.14.5.0-13
                               swtpm             0.10.1-1             0.10.1-2
                                 syd             3.51.0-1             3.51.2-1
                           syslog-ng             4.11.0-1             4.11.0-2
                      syslog-ng-amqp             4.11.0-1             4.11.0-2
                    syslog-ng-geoip2             4.11.0-1             4.11.0-2
                     syslog-ng-kafka             4.11.0-1             4.11.0-2
                   syslog-ng-mongodb             4.11.0-1             4.11.0-2
                    syslog-ng-python             4.11.0-1             4.11.0-2
                     syslog-ng-redis             4.11.0-1             4.11.0-2
                      syslog-ng-smtp             4.11.0-1             4.11.0-2
                      syslog-ng-snmp             4.11.0-1             4.11.0-2
                       syslog-ng-sql             4.11.0-1             4.11.0-2
                             systing              1.0.0-1              1.0.0-2
                            taffybar             4.1.0-13             4.1.0-18
                      tamarin-prover            1.12.0-10            1.12.0-14
                     taskwarrior-tui             0.26.7-1             0.26.8-1
                     tauon-music-box              9.1.1-1              9.1.2-1
                    telegram-desktop              6.6.4-6              6.6.4-7
                          terragrunt             0.99.4-2             0.99.5-1
                              thunar             4.20.7-1             4.20.8-1
                         thunderbird              149.0-1            149.0.1-1
                 thunderbird-i18n-af              149.0-1            149.0.1-1
                 thunderbird-i18n-ar              149.0-1            149.0.1-1
                thunderbird-i18n-ast              149.0-1            149.0.1-1
                 thunderbird-i18n-be              149.0-1            149.0.1-1
                 thunderbird-i18n-bg              149.0-1            149.0.1-1
                 thunderbird-i18n-br              149.0-1            149.0.1-1
                 thunderbird-i18n-ca              149.0-1            149.0.1-1
                thunderbird-i18n-cak              149.0-1            149.0.1-1
                 thunderbird-i18n-cs              149.0-1            149.0.1-1
                 thunderbird-i18n-cy              149.0-1            149.0.1-1
                 thunderbird-i18n-da              149.0-1            149.0.1-1
                 thunderbird-i18n-de              149.0-1            149.0.1-1
                thunderbird-i18n-dsb              149.0-1            149.0.1-1
                 thunderbird-i18n-el              149.0-1            149.0.1-1
              thunderbird-i18n-en-gb              149.0-1            149.0.1-1
              thunderbird-i18n-en-us              149.0-1            149.0.1-1
              thunderbird-i18n-es-ar              149.0-1            149.0.1-1
              thunderbird-i18n-es-es              149.0-1            149.0.1-1
                 thunderbird-i18n-et              149.0-1            149.0.1-1
                 thunderbird-i18n-eu              149.0-1            149.0.1-1
                 thunderbird-i18n-fi              149.0-1            149.0.1-1
                 thunderbird-i18n-fr              149.0-1            149.0.1-1
              thunderbird-i18n-fy-nl              149.0-1            149.0.1-1
              thunderbird-i18n-ga-ie              149.0-1            149.0.1-1
                 thunderbird-i18n-gd              149.0-1            149.0.1-1
                 thunderbird-i18n-gl              149.0-1            149.0.1-1
                 thunderbird-i18n-he              149.0-1            149.0.1-1
                 thunderbird-i18n-hr              149.0-1            149.0.1-1
                thunderbird-i18n-hsb              149.0-1            149.0.1-1
                 thunderbird-i18n-hu              149.0-1            149.0.1-1
              thunderbird-i18n-hy-am              149.0-1            149.0.1-1
                 thunderbird-i18n-id              149.0-1            149.0.1-1
                 thunderbird-i18n-is              149.0-1            149.0.1-1
                 thunderbird-i18n-it              149.0-1            149.0.1-1
                 thunderbird-i18n-ja              149.0-1            149.0.1-1
                 thunderbird-i18n-ka              149.0-1            149.0.1-1
                thunderbird-i18n-kab              149.0-1            149.0.1-1
                 thunderbird-i18n-kk              149.0-1            149.0.1-1
                 thunderbird-i18n-ko              149.0-1            149.0.1-1
                 thunderbird-i18n-lt              149.0-1            149.0.1-1
                 thunderbird-i18n-ms              149.0-1            149.0.1-1
              thunderbird-i18n-nb-no              149.0-1            149.0.1-1
                 thunderbird-i18n-nl              149.0-1            149.0.1-1
              thunderbird-i18n-nn-no              149.0-1            149.0.1-1
              thunderbird-i18n-pa-in              149.0-1            149.0.1-1
                 thunderbird-i18n-pl              149.0-1            149.0.1-1
              thunderbird-i18n-pt-br              149.0-1            149.0.1-1
              thunderbird-i18n-pt-pt              149.0-1            149.0.1-1
                 thunderbird-i18n-rm              149.0-1            149.0.1-1
                 thunderbird-i18n-ro              149.0-1            149.0.1-1
                 thunderbird-i18n-ru              149.0-1            149.0.1-1
                 thunderbird-i18n-sk              149.0-1            149.0.1-1
                 thunderbird-i18n-sl              149.0-1            149.0.1-1
                 thunderbird-i18n-sq              149.0-1            149.0.1-1
                 thunderbird-i18n-sr              149.0-1            149.0.1-1
              thunderbird-i18n-sv-se              149.0-1            149.0.1-1
                 thunderbird-i18n-th              149.0-1            149.0.1-1
                 thunderbird-i18n-tr              149.0-1            149.0.1-1
                 thunderbird-i18n-uk              149.0-1            149.0.1-1
                 thunderbird-i18n-uz              149.0-1            149.0.1-1
                 thunderbird-i18n-vi              149.0-1            149.0.1-1
              thunderbird-i18n-zh-cn              149.0-1            149.0.1-1
              thunderbird-i18n-zh-tw              149.0-1            149.0.1-1
                         timescaledb             2.26.0-1             2.26.1-1
             timescaledb-old-upgrade             2.26.0-1             2.26.1-1
                       tokio-console             0.1.14-1             0.1.14-2
                             traefik             3.6.11-1             3.6.12-1
                                tree              2.3.1-1              2.3.2-1
                             udiskie              2.6.1-1              2.6.2-1
                         udisks2-qt5              5.0.6-2                    -
              ultramaster-kr106-clap              2.4.4-1            2.4.6.1-1
               ultramaster-kr106-lv2              2.4.4-1            2.4.6.1-1
              ultramaster-kr106-vst3              2.4.4-1            2.4.6.1-1
                               usage             2.18.2-1              3.2.0-1
                            usbguard              1.1.4-4              1.1.4-5
                                vala            0.56.18-5            0.56.19-1
                             vcspull             1.58.0-1             1.58.1-1
                    vhba-module-dkms          20250329-70          20250329-71
                                 vim           9.2.0204-2           9.2.0272-1
                         vim-runtime           9.2.0204-2           9.2.0272-1
                                 vis 0.9.r397.gda84fe70-1 0.9.r399.g1a4fb0fd-1
             vis-syntax-highlighting 0.9.r397.gda84fe70-1 0.9.r399.g1a4fb0fd-1
                                 vlc             3.0.22-1             3.0.22-2
                             vlc-cli             3.0.22-1             3.0.22-2
                     vlc-gui-ncurses             3.0.22-1             3.0.22-2
                          vlc-gui-qt             3.0.22-1             3.0.22-2
                      vlc-gui-skins2             3.0.22-1             3.0.22-2
                   vlc-plugin-a52dec             3.0.22-1             3.0.22-2
                    vlc-plugin-aalib             3.0.22-1             3.0.22-2
                     vlc-plugin-alsa             3.0.22-1             3.0.22-2
                      vlc-plugin-aom             3.0.22-1             3.0.22-2
                  vlc-plugin-archive             3.0.22-1             3.0.22-2
                  vlc-plugin-aribb24             3.0.22-1             3.0.22-2
                  vlc-plugin-aribb25             3.0.22-1             3.0.22-2
                      vlc-plugin-ass             3.0.22-1             3.0.22-2
                    vlc-plugin-avahi             3.0.22-1             3.0.22-2
                   vlc-plugin-bluray             3.0.22-1             3.0.22-2
                     vlc-plugin-caca             3.0.22-1             3.0.22-2
                     vlc-plugin-cddb             3.0.22-1             3.0.22-2
               vlc-plugin-chromecast             3.0.22-1             3.0.22-2
                    vlc-plugin-dav1d             3.0.22-1             3.0.22-2
                     vlc-plugin-dbus             3.0.22-1             3.0.22-2
         vlc-plugin-dbus-screensaver             3.0.22-1             3.0.22-2
                      vlc-plugin-dca             3.0.22-1             3.0.22-2
                      vlc-plugin-dvb             3.0.22-1             3.0.22-2
                      vlc-plugin-dvd             3.0.22-1             3.0.22-2
                    vlc-plugin-faad2             3.0.22-1             3.0.22-2
                   vlc-plugin-ffmpeg             3.0.22-1             3.0.22-2
                 vlc-plugin-firewire             3.0.22-1             3.0.22-2
                     vlc-plugin-flac             3.0.22-1             3.0.22-2
               vlc-plugin-fluidsynth             3.0.22-1             3.0.22-2
                 vlc-plugin-freetype             3.0.22-1             3.0.22-2
                      vlc-plugin-gme             3.0.22-1             3.0.22-2
                   vlc-plugin-gnutls             3.0.22-1             3.0.22-2
                vlc-plugin-gstreamer             3.0.22-1             3.0.22-2
                  vlc-plugin-inflate             3.0.22-1             3.0.22-2
                     vlc-plugin-jack             3.0.22-1             3.0.22-2
                  vlc-plugin-journal             3.0.22-1             3.0.22-2
                     vlc-plugin-jpeg             3.0.22-1             3.0.22-2
                     vlc-plugin-kate             3.0.22-1             3.0.22-2
                  vlc-plugin-kwallet             3.0.22-1             3.0.22-2
                vlc-plugin-libsecret             3.0.22-1             3.0.22-2
                     vlc-plugin-lirc             3.0.22-1             3.0.22-2
                  vlc-plugin-live555             3.0.22-1             3.0.22-2
                      vlc-plugin-lua             3.0.22-1             3.0.22-2
                      vlc-plugin-mad             3.0.22-1             3.0.22-2
                 vlc-plugin-matroska             3.0.22-1             3.0.22-2
                     vlc-plugin-mdns             3.0.22-1             3.0.22-2
                  vlc-plugin-modplug             3.0.22-1             3.0.22-2
                    vlc-plugin-mpeg2             3.0.22-1             3.0.22-2
                   vlc-plugin-mpg123             3.0.22-1             3.0.22-2
                      vlc-plugin-mtp             3.0.22-1             3.0.22-2
                 vlc-plugin-musepack             3.0.22-1             3.0.22-2
                      vlc-plugin-nfs             3.0.22-1             3.0.22-2
                   vlc-plugin-notify             3.0.22-1             3.0.22-2
                      vlc-plugin-ogg             3.0.22-1             3.0.22-2
                     vlc-plugin-opus             3.0.22-1             3.0.22-2
                      vlc-plugin-png             3.0.22-1             3.0.22-2
                    vlc-plugin-pulse             3.0.22-1             3.0.22-2
                vlc-plugin-quicksync             3.0.22-1             3.0.22-2
               vlc-plugin-samplerate             3.0.22-1             3.0.22-2
                      vlc-plugin-sdl             3.0.22-1             3.0.22-2
                     vlc-plugin-sftp             3.0.22-1             3.0.22-2
                    vlc-plugin-shout             3.0.22-1             3.0.22-2
                      vlc-plugin-smb             3.0.22-1             3.0.22-2
                     vlc-plugin-soxr             3.0.22-1             3.0.22-2
                    vlc-plugin-speex             3.0.22-1             3.0.22-2
                      vlc-plugin-srt             3.0.22-1             3.0.22-2
                      vlc-plugin-svg             3.0.22-1             3.0.22-2
                      vlc-plugin-tag             3.0.22-1             3.0.22-2
                   vlc-plugin-theora             3.0.22-1             3.0.22-2
                  vlc-plugin-twolame             3.0.22-1             3.0.22-2
                     vlc-plugin-udev             3.0.22-1             3.0.22-2
                     vlc-plugin-upnp             3.0.22-1             3.0.22-2
                   vlc-plugin-vorbis             3.0.22-1             3.0.22-2
                      vlc-plugin-vpx             3.0.22-1             3.0.22-2
                     vlc-plugin-x264             3.0.22-1             3.0.22-2
                     vlc-plugin-x265             3.0.22-1             3.0.22-2
                      vlc-plugin-xml             3.0.22-1             3.0.22-2
                     vlc-plugin-zvbi             3.0.22-1             3.0.22-2
                     vlc-plugins-all             3.0.22-1             3.0.22-2
                    vlc-plugins-base             3.0.22-1             3.0.22-2
                   vlc-plugins-extra             3.0.22-1             3.0.22-2
            vlc-plugins-video-output             3.0.22-1             3.0.22-2
           vlc-plugins-visualization             3.0.22-1             3.0.22-2
                              vmexec              0.4.0-1              0.5.2-1
                                vpnc  1:0.5.3.r539.r239-1  1:0.5.3.r557.r241-1
                         warzone2100              4.6.3-2              4.6.3-3
                           watchexec              2.5.0-1              2.5.1-1
             webrtc-audio-processing                2.1-5                2.1-6
                         wireplumber             0.5.13-2             0.5.14-1
                    wireplumber-docs             0.5.13-2             0.5.14-1
                       wireshark-cli              4.6.4-1              4.6.4-2
                        wireshark-qt              4.6.4-1              4.6.4-2
              xdg-desktop-portal-dde             1.0.13-7             1.0.14-1
                           xdp-tools              1.6.2-1              1.6.3-1
                           xfdesktop             4.20.1-3             4.20.2-1
                              xmobar             0.50-137             0.50-141
                              xmonad           0.18.0-154           0.18.0-156
                      xmonad-contrib           0.18.1-138           0.18.1-140
                         xmonad-dbus          0.1.0.2-240          0.1.0.2-243
                       xmonad-extras             0.17.3-6             0.17.3-9
                      xorg-setxkbmap              1.3.4-2              1.3.5-1
                                 xrt          1:2.21.75-5          1:2.21.75-6
                          xtrabackup            8.4.0_5-1            8.4.0_5-2
                                  z3             4.15.4-2             4.16.0-1
                             z3-java             4.15.4-2             4.16.0-1
                             zathura         2026.02.22-1         2026.03.27-1
                          zathura-cb         2026.02.03-3         2026.02.03-4
                        zathura-djvu         2026.02.03-3         2026.02.03-4
                   zathura-pdf-mupdf         2026.02.03-5         2026.02.03-6
                 zathura-pdf-poppler         2026.02.03-3         2026.02.03-4
                          zathura-ps         2026.02.03-3         2026.02.03-4
                              zettlr              4.3.0-1              4.3.1-1
                              zypper            1.14.95-1            1.14.95-2
                            ares-emu                    -                147-2
                             diffoci                    -              0.1.8-1
                         govulncheck                    -              1.1.4-1
                       libkysdk-base                    -            3.0.1.0-1
                         librashader                    -             0.10.1-2
                       python-podman                    -              5.8.0-2
                        python-pylxd                    -              2.4.0-2
                        python-ws4py                    -              0.6.0-4
                         udisks2-qt6                    -              6.0.1-1


:: Different sync package(s) in repository multilib x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                         lib32-clang             22.1.1-1             22.1.2-1
              lib32-gst-plugins-base             1.28.1-2             1.28.1-3
         lib32-gst-plugins-base-libs             1.28.1-2             1.28.1-3
              lib32-gst-plugins-good             1.28.1-2             1.28.1-3
                     lib32-gstreamer             1.28.1-2             1.28.1-3
                        lib32-libvpx             1.15.2-2             1.16.0-2
                          lib32-llvm           1:22.1.1-1           1:22.1.2-1
                     lib32-llvm-libs           1:22.1.1-1           1:22.1.2-1

Click to view the poll.

Check if your mirror has already synced:

• Mirror-Check Service

5 posts - 5 participants

Read full topic

The post 15-Year-Old Flaw in StrongSwan VPN Lets Attackers Crash Networks appeared first on PrivacySavvy.

Read more →

The post StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs appeared first on IT Security News.

The post StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs appeared first on SecurityWeek.

Hello Manjaro user community, here we have another set of package updates. This might mark the start of the development cycle of the upcoming ‘Bian-May’ release series. With this we aim to update the default kernel to 7.0 series. Also there will be Plasma 6.6 series, KDE Gears 26.04 and GNOME 50 release series. XFCE will stay at 4.20 this release cycle. A release of ‘Bian-May’ can be expected end of April, beginning of May. Let us know any issues you may found thus far …

Current Promotions

• Get the latest Gaming Laptop by Slimbook powered by Manjaro: Slimbook Manjaro III
• Protect your personal data, keep yourself safe with Surfshark VPN: See current promotion

Recent News

• Manjaro 26.0 Anh-Linh released
• Manjaro Summit public Alpha now available
• As of Linux 5.4.302, the 5.4 series is now EOL (End Of Life). Please install 5.10 LTS (Long Term Support) or 5.15 LTS.
• As of Linux 6.16.12, the 6.16 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.
• As of Linux 6.17.13, the 6.17 series is now EOL (End Of Life). Please install 6.18 LTS (Long Term Support) and/or 6.12 LTS.

Notable Package Updates

• Kernel 7.0 got updated to 7.0-rc6
• Thunderbird 149.0.1
• Some updates to Deepin
• freecad 1.1.0
• Rebuilds and updates to haskell
• wireplumber 0.5.14

Additional Info

Get our latest daily developer images now from Github: Plasma, GNOME, XFCE. You can get the latest stable releases of Manjaro from CDN77.

Our current supported kernels

• linux510 5.10.252
• linux515 5.15.202
• linux61 6.1.167
• linux66 6.6.130
• linux612 6.12.78
• linux618 6.18.20
• linux619 6.19.10
• linux70 7.0.0rc6
• linux61-rt 6.1.166_rt61
• linux66-rt 6.6.129_rt70
• linux612-rt 6.12.74_rt16
• linux617-rt 6.17.5_rt7

Package Changes (3/31/26 05:17 CEST)

• testing core x86_64: 3 new and 3 removed package(s)
• testing extra x86_64: 1131 new and 1127 removed package(s)
• testing multilib x86_64: 8 new and 8 removed package(s)

:: Different overlay package(s) in repository core x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                             linux70           7.0.0rc5-1           7.0.0rc6-1
                     linux70-headers           7.0.0rc5-1           7.0.0rc6-1


:: Different sync package(s) in repository core x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                                file               5.47-1               5.47-2


:: Different overlay package(s) in repository extra x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                             discord          1:0.0.131-1                    -
                   linux70-acpi_call            1.2.2-0.5            1.2.2-0.6
                    linux70-bbswitch              0.8-0.5              0.8-0.6
                 linux70-broadcom-wl     6.30.223.271-0.5     6.30.223.271-0.6
                linux70-nvidia-470xx       470.256.02-0.5       470.256.02-0.6
                 linux70-nvidia-open        595.58.03-0.1        595.58.03-0.2
                       linux70-r8168         8.056.02-0.5         8.056.02-0.6
                   linux70-rtl8723bu         20250813-0.5         20250813-0.6
                    linux70-tp_smapi             0.45-0.5             0.45-0.6
                 linux70-vhba-module         20250329-0.5         20250329-0.6
     linux70-virtualbox-host-modules            7.2.6-0.5            7.2.6-0.6
                         linux70-zfs            2.4.1-0.5            2.4.1-0.6


:: Different sync package(s) in repository extra x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                          abseil-cpp         20250814.1-1         20260107.1-1
                               afl++              4.35c-2              4.40c-1
                                agda          2.6.4.3-119          2.6.4.3-121
                          aliyun-cli              3.2.9-1              3.3.3-1
                              allure         0.11.0.0-317         0.11.0.0-320
                          amdgpu_top             0.11.2-1             0.11.3-1
                       android-tools            35.0.2-23            35.0.2-24
                          apache-orc              2.3.0-2              2.3.0-3
                                apko             1.1.16-1              1.2.0-1
                               arbtt         0.12.0.3-185         0.12.0.3-187
                             arch-hs            0.12.1-66            0.12.1-70
                      argo-workflows              4.0.2-1              4.0.3-1
                               arrow             23.0.1-2             23.0.1-3
                             astroid               0.17-8               0.17-9
                           astroterm             1.0.10-1              1.1.0-1
                           aws-vault              7.9.7-1             7.9.13-1
                              azcopy            10.32.1-1            10.32.2-1
                       bbswitch-dkms              0.8-806              0.8-807
                       bcachefs-dkms           3:1.37.3-1           3:1.37.4-1
                      bcachefs-tools           3:1.37.3-1           3:1.37.4-1
                               beets              2.7.1-1              2.8.0-1
                               bftpd                6.3-1                6.6-1
                              bloaty               1.1-22               1.1-23
                            bpftrace             0.25.0-1             0.25.1-1
                                brat              0.9.0-2             0.10.0-1
                                 bun             1.3.11-1             1.3.11-2
                               byobu               6.14-1               6.15-1
                       cabal-install          3.10.3.0-15          3.10.3.0-18
                          cabal-plan          0.7.3.0-128          0.7.3.0-130
                      cargo-binstall             1.17.8-2             1.17.9-1
                         cargo-insta             1.47.0-1             1.47.2-1
                        cargo-update             18.2.0-2             19.0.1-1
                             castxml              0.7.0-1              0.7.0-2
                           cbor-tool          0.2.3.0-124          0.2.3.0-126
                              ccache             4.13.1-1             4.13.2-1
                               cgrep             8.1.0-94             8.1.0-97
                              chatty              0.8.9-1              0.8.9-2
                          cherrytree              1.6.3-1              1.6.3-2
                           clash-ghc             1.8.2-97            1.8.2-100
                          cockatrice             2.10.3-1             2.10.3-2
                               crash              9.0.1-1              9.0.1-2
                             cryptol             3.3.0-47             3.3.0-50
                                 cue             0.15.4-1             0.16.0-1
                    curl-impersonate              1.5.1-1              1.5.2-1
                                cyme             2.2.11-2              2.3.0-1
                               darcs           2.18.5-191           2.18.5-194
                             dbeaver             26.0.0-1             26.0.1-1
                     deepin-anything             6.2.11-1              7.0.0-2
                deepin-anything-dkms             6.2.11-1              7.0.0-2
                          deepin-api             6.0.35-1             6.0.37-1
                 deepin-app-services             1.0.40-1             1.0.41-1
          deepin-application-manager             1.2.42-1             1.2.44-1
                     deepin-calendar             6.5.17-1             6.5.18-1
                    deepin-clipboard              6.1.7-1              6.1.8-1
                   deepin-compressor              6.5.9-1             6.5.11-1
               deepin-control-center             6.1.13-1             6.1.15-1
                       deepin-daemon             6.1.46-4             6.1.49-1
                deepin-desktop-theme             1.1.16-1             1.1.18-1
             deepin-device-formatter           0.0.1.18-2              1.5.1-1
                         deepin-draw             6.5.25-1             6.5.26-1
                       deepin-editor             6.5.41-1             6.5.42-1
                 deepin-grand-search              5.4.7-3              5.4.9-1
                    deepin-launchpad             2.0.25-3             2.0.26-1
                        deepin-movie          1:5.10.45-1          1:5.10.46-1
                 deepin-network-core             2.0.42-1             2.0.43-1
               deepin-qt5integration             5.7.30-2             6.7.31-1
          deepin-qt5platform-plugins             5.7.30-2             6.7.31-1
               deepin-qt6integration             6.0.48-3             6.7.31-1
          deepin-qt6platform-plugins             6.0.48-3             6.7.31-1
                  deepin-screensaver             5.0.19-2             5.0.20-1
                     deepin-services             1.0.19-1             1.0.21-1
                      deepin-session             2.0.15-2             2.0.17-1
                        deepin-shell             2.0.27-3             2.0.29-1
               deepin-system-monitor             6.5.19-2             6.5.21-1
                     deepin-terminal             6.5.28-3             6.5.29-1
                  deepin-tray-loader             2.0.24-3             2.0.26-1
                        deepin-turbo            0.0.6.2-1            0.0.6.3-1
                     deepin-util-dfm             1.2.29-1             1.2.31-1
                   deepin-wallpapers            1:1.7.8-1           1:1.7.14-1
                      deepin-widgets             6.0.18-2             6.0.20-1
                               dhall            1.42.3-45            1.42.3-48
                          dhall-bash           1.0.41-176           1.0.41-180
                          dhall-docs           1.0.12-168           1.0.12-171
                          dhall-json           1.7.12-172           1.7.12-175
                    dhall-lsp-server            1.1.4-102            1.1.4-106
                          dhall-yaml           1.2.12-177           1.2.12-180
                       diff-so-fancy              1.4.6-1              1.4.8-1
                          diffoscope                313-1                315-1
                             discord          1:0.0.130-1          1:0.0.131-1
                             dovecot              2.4.3-1              2.4.3-2
                               drone             2.28.0-1             2.28.1-1
                           drone-oss             2.28.0-1             2.28.1-1
                            dtk6core           1:6.7.32-2           1:6.7.33-1
                     dtk6declarative           1:6.7.32-2           1:6.7.33-1
                             dtk6gui           1:6.7.32-2           1:6.7.33-1
                             dtk6log             6.7.32-2             6.7.33-1
                          dtk6widget           1:6.7.32-2           1:6.7.33-1
                             dtkcore           1:6.7.32-2           1:6.7.33-1
                      dtkdeclarative           1:6.7.32-2           1:6.7.33-1
                              dtkgui           1:6.7.32-2           1:6.7.33-1
                              dtklog             6.7.32-2             6.7.33-1
                           dtkwidget           1:6.7.32-2           1:6.7.33-1
                               dunst             1.13.1-1             1.13.2-1
                         easyeffects              8.1.7-1              8.1.8-1
                              emptty             0.16.0-1             0.16.1-1
               evolution-data-server             3.58.3-1             3.58.3-2
          evolution-data-server-docs             3.58.3-1             3.58.3-2
                  falcosecurity-libs             0.20.0-9             0.23.1-1
                           fastfetch             2.60.0-1             2.61.0-1
           firefox-developer-edition            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-ach            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-af            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-an            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ar            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-ast            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-az            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-be            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-bg            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-bn            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-br            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-bs            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ca            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-ca-valencia      150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-cak            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-cs            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-cy            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-da            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-de            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-dsb            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-el            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-en-ca            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-en-gb            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-en-us            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-eo            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-ar            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-cl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-es            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-es-mx            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-et            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-eu            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-fa            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ff            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-fi            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-fr            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-fur            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-fy-nl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-ga-ie            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-gd            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-gl            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-gn            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-gu-in            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-he            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-hi-in            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-hr            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-hsb            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-hu            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-hy-am            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ia            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-id            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-is            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-it            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ja            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ka            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-kab            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-kk            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-km            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-kn            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ko            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-lij            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-lt            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-lv            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-mk            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-mr            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ms            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-my            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-nb-no            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-ne-np            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-nl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-nn-no            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-oc            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-pa-in            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-pl            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-pt-br            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-pt-pt            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-rm            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ro            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ru            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-sat            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sc            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-sco            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-si            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sk            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-skr            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sl            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-son            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sq            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-sr            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-sv-se            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-szl            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ta            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-te            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-tg            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-th            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-tl            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-tr            150.0b2-1            150.0b3-1
  firefox-developer-edition-i18n-trs            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-uk            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-ur            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-uz            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-vi            150.0b2-1            150.0b3-1
   firefox-developer-edition-i18n-xh            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-zh-cn            150.0b2-1            150.0b3-1
firefox-developer-edition-i18n-zh-tw            150.0b2-1            150.0b3-1
                             freecad             1.0.2-10              1.1.0-2
                      freeciv-common              3.2.2-6              3.2.4-1
                        freeciv-gtk3              3.2.2-6              3.2.4-1
                        freeciv-gtk4              3.2.2-6              3.2.4-1
                          freeciv-qt              3.2.2-6              3.2.4-1
                           ft2-clone               2.12-1               2.13-1
                                 gdb               17.1-2               17.1-3
                          gdb-common               17.1-2               17.1-3
                                gegl             0.4.68-1             0.4.70-1
                          gemini-cli           1:0.35.2-1           1:0.35.3-1
                                gimp              3.2.0-1              3.2.2-1
                           git-annex       10.20251215-14       10.20251215-19
                           git-delta             0.19.1-1             0.19.2-1
                          git-repair       1.20230814-189       1.20230814-190
                               gitit         0.15.1.2-121         0.15.1.2-127
                             glances              4.5.2-2              4.5.3-1
                               glirc            2.40.1-70            2.40.1-74
           globalprotect-openconnect              2.5.1-2              2.5.1-3
                                  gn    0.2324.304bbef6-1    0.2324.304bbef6-2
                      gnuradio-iqbal             0.38.3-2             0.38.3-3
                       golangci-lint             2.11.3-1             2.11.4-1
                         google-glog              0.7.1-1              0.7.1-2
                                grpc             1.78.1-2             1.80.0-1
                            grpc-cli             1.78.1-2             1.80.0-1
                                gvim           9.2.0204-2           9.2.0272-1
                              hamlib              4.6.5-3              4.7.0-1
                           hardinfo2             2.2.16-1             2.2.16-2
                 haskell-adjunctions            4.4.3-102              4.4.4-1
                       haskell-aeson            2.2.1.0-5            2.2.1.0-7
         haskell-aeson-better-errors           0.9.1.3-73           0.9.1.3-75
                haskell-aeson-casing          0.2.0.0-233          0.2.0.0-235
                  haskell-aeson-diff         1.1.0.13-267         1.1.0.13-269
                haskell-aeson-pretty           0.8.10-150           0.8.10-152
                    haskell-aeson-qq            0.8.4-335            0.8.4-337
        haskell-aeson-warning-parser             0.1.1-89             0.1.1-91
                  haskell-aeson-yaml          1.1.0.1-349          1.1.0.1-351
                haskell-apply-refact          0.14.0.0-63          0.14.0.0-64
                    haskell-arch-web             0.3.2-54             0.3.2-58
                    haskell-arithmoi          0.13.2.0-32          0.13.2.0-35
            haskell-attoparsec-aeson            2.2.0.0-7            2.2.0.0-9
                haskell-authenticate          1.3.5.2-250          1.3.5.2-253
          haskell-authenticate-oauth              1.7-373              1.7-375
                         haskell-aws             0.24.2-9            0.24.2-12
              haskell-binary-conduit            1.3.1-588            1.3.1-590
            haskell-binary-instances            1.0.4-161            1.0.4-163
               haskell-binary-tagged            0.3.1-332            0.3.1-334
                      haskell-bitvec           1.1.5.0-43           1.1.5.0-45
                  haskell-bower-json          1.1.0.0-229          1.1.0.0-231
                  haskell-breakpoint           0.1.4.0-20            0.1.5.0-1
                     haskell-butcher          1.3.3.2-508          1.3.3.2-510
                    haskell-bv-sized             1.0.6-96             1.0.6-99
                  haskell-byte-order          0.1.3.1-161          0.1.3.1-163
   haskell-bytestring-strict-builder           0.4.5.8-76           0.4.5.8-78
       haskell-cabal-install-parsers           0.6.1.1-12           0.6.1.1-16
                 haskell-casa-client             0.0.3-32             0.0.3-36
                  haskell-casa-types             0.0.3-24             0.0.3-27
                       haskell-cborg          0.2.10.0-86          0.2.10.0-88
                  haskell-cborg-json          0.2.6.0-101          0.2.6.0-103
                  haskell-cheapskate          0.1.1.2-861          0.1.1.2-864
                    haskell-checkers            0.6.0-257            0.6.0-258
                     haskell-chimera          0.4.1.0-144          0.4.1.0-146
                          haskell-ci            0.16.6-48            0.16.6-52
                    haskell-citeproc           0.8.1.1-84           0.8.1.1-86
                   haskell-clash-lib             1.8.2-97            1.8.2-100
               haskell-clash-prelude             1.8.2-89             1.8.2-92
              haskell-classy-prelude           1.5.0.3-81           1.5.0.3-84
                haskell-coinbase-pro          0.9.3.2-435          0.9.3.2-439
       haskell-commonmark-extensions            0.2.5.6-5            0.2.5.6-6
           haskell-commonmark-pandoc           0.2.2.3-46           0.2.2.3-48
                     haskell-concise          0.1.0.1-660          0.1.0.1-662
                     haskell-conduit          1.3.6.1-133          1.3.6.1-135
               haskell-conduit-extra             1.3.8-76             1.3.8-78
               haskell-conduit-parse          0.2.1.1-311          0.2.1.1-313
               haskell-config-schema          1.3.0.0-234          1.3.0.0-236
          haskell-constraints-extras           0.4.0.2-54           0.4.0.2-56
               haskell-contravariant              1.5.5-6              1.5.6-1
        haskell-contravariant-extras            0.3.5.4-6            0.3.5.4-7
                   haskell-criterion           1.6.3.0-47           1.6.3.0-49
       haskell-criterion-measurement           0.2.3.0-57           0.2.3.0-59
             haskell-crypton-conduit            0.2.3-219            0.2.3-221
          haskell-crypton-connection             0.4.5-26             0.4.5-28
          haskell-cryptonite-conduit            0.2.2-792            0.2.2-794
                         haskell-dav            1.3.4-874            1.3.4-879
                        haskell-dbus             1.3.3-73             1.3.3-76
               haskell-dbus-hslogger          0.1.0.1-676          0.1.0.1-679
              haskell-deferred-folds           0.9.18.8-2           0.9.18.8-4
        haskell-dense-linear-algebra          0.1.0.0-444          0.1.0.0-446
               haskell-dependent-map            0.4.0.1-9           0.4.0.1-11
               haskell-dependent-sum          0.7.2.0-219          0.7.2.0-221
      haskell-dependent-sum-template           0.2.0.2-17           0.2.0.2-19
                       haskell-deque          0.4.4.2-114          0.4.4.2-116
              haskell-deriving-aeson           0.2.10-131           0.2.10-133
                      haskell-docopt          0.7.0.8-151          0.7.0.8-153
                haskell-doctemplates          0.11.0.1-76          0.11.0.1-78
            haskell-doctest-discover          0.2.0.0-213          0.2.0.0-215
                      haskell-either             5.0.3-79             5.0.3-80
                  haskell-enummapset          0.7.3.0-139          0.7.3.0-141
                   haskell-esqueleto           3.5.11.0-8           3.5.11.1-4
                  haskell-fdo-notify            0.3.1-922            0.3.1-925
                        haskell-feed          1.3.2.1-330          1.3.2.1-332
                    haskell-floskell           0.10.8-189           0.10.8-191
                       haskell-focus          1.0.3.2-186          1.0.3.2-188
                       haskell-foldl            1.4.18-93            1.4.18-94
                    haskell-fourmolu           0.13.1.0-5           0.14.0.0-2
                        haskell-free              5.2-124              5.2-125
                    haskell-fsnotify           0.4.4.0-40           0.4.4.0-42
                haskell-generic-data           1.1.0.2-66           1.1.0.2-68
                haskell-generic-lens          2.2.2.0-200          2.2.2.0-202
                   haskell-ghc-check          0.5.0.8-150          0.5.0.8-151
              haskell-ghc-exactprint            1.7.1.0-9           1.7.1.0-10
                      haskell-ghcide           2.2.0.0-16            2.3.0.0-5
           haskell-ghcide-test-utils          1.9.0.0-292          1.9.0.0-299
                          haskell-gi           0.26.16-10           0.26.16-12
                      haskell-gi-atk            2.0.28-38            2.0.28-40
                    haskell-gi-cairo            1.0.30-31            1.0.30-33
          haskell-gi-cairo-connector            0.1.1-313            0.1.1-315
                 haskell-gi-dbusmenu            0.4.14-33            0.4.14-35
             haskell-gi-dbusmenugtk3           0.4.15-130           0.4.15-132
                haskell-gi-freetype2             2.0.5-41             2.0.5-43
                      haskell-gi-gdk            4.0.9-106            4.0.9-108
                     haskell-gi-gdk3            3.0.29-30            3.0.29-32
                  haskell-gi-gdk3x11             3.0.15-6             3.0.16-1
                haskell-gi-gdkpixbuf           2.0.32-142           2.0.32-144
                   haskell-gi-gdkx11            4.0.8-129            4.0.8-131
                      haskell-gi-gio            2.0.38-25            2.0.38-27
                     haskell-gi-glib            2.0.30-59            2.0.30-61
                  haskell-gi-gmodule             2.0.6-43             2.0.6-45
                  haskell-gi-gobject            2.0.31-75            2.0.31-77
                 haskell-gi-graphene             1.0.8-68             1.0.8-70
                      haskell-gi-gsk             4.0.8-55             4.0.8-57
                      haskell-gi-gtk            4.0.11-32            4.0.11-34
                   haskell-gi-gtk-hs           0.3.17-101           0.3.17-103
                     haskell-gi-gtk3            3.0.43-13            3.0.43-15
                 haskell-gi-harfbuzz           0.0.10-147           0.0.10-149
                    haskell-gi-pango            1.0.30-36            1.0.30-38
                     haskell-gi-xlib            2.0.14-93            2.0.14-95
                     haskell-git-lfs             1.2.5-78             1.2.5-81
                     haskell-githash          0.1.6.3-345          0.1.6.3-348
                haskell-gtk-sni-tray          0.1.8.1-394          0.1.8.1-397
                   haskell-gtk-strut          0.1.3.2-348          0.1.3.2-350
                  haskell-hackage-db            2.1.3-191            2.1.3-193
            haskell-hackage-security           0.6.3.2-13           0.6.3.2-15
             haskell-haddock-library           1.11.0-184           1.11.0-188
                     haskell-hadrian     0.1.0.0+9.6.6-16     0.1.0.0+9.6.6-19
                      haskell-hakyll          4.16.4.0-25          4.16.4.0-31
            haskell-happstack-server             7.9.3-24             7.9.3-25
                       haskell-hasql          1.5.0.5-114            1.6.1.1-2
    haskell-hasql-dynamic-statements          0.3.1.1-280            0.3.1.2-2
             haskell-hasql-implicits          0.1.0.5-316          0.1.0.5-320
         haskell-hasql-notifications           0.2.0.5-89           0.2.0.5-93
                  haskell-hasql-pool          0.5.2.2-399            0.8.0.2-2
           haskell-hasql-transaction          1.0.1.1-421            1.0.1.2-2
            haskell-hedgehog-classes          0.2.5.4-216          0.2.5.4-218
                        haskell-here           1.2.14-135           1.2.14-136
                    haskell-hie-bios           0.12.0-159           0.12.0-161
                 haskell-hledger-lib               1.52-6               1.52-8
haskell-hls-alternate-number-format-plugin     2.2.0.0-16            2.3.0.0-5
        haskell-hls-cabal-fmt-plugin           2.2.0.0-16            2.3.0.0-5
            haskell-hls-cabal-plugin           2.2.0.0-16            2.3.0.0-5
   haskell-hls-call-hierarchy-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-change-type-signature-plugin       2.2.0.0-16            2.3.0.0-5
            haskell-hls-class-plugin           2.2.0.0-16            2.3.0.0-5
       haskell-hls-code-range-plugin           2.2.0.0-16            2.3.0.0-5
             haskell-hls-eval-plugin           2.2.0.0-16            2.3.0.0-5
  haskell-hls-explicit-fixity-plugin           2.2.0.0-16            2.3.0.0-5
 haskell-hls-explicit-imports-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-explicit-record-fields-plugin      2.2.0.0-16            2.3.0.0-5
         haskell-hls-floskell-plugin           2.2.0.0-16            2.3.0.0-5
         haskell-hls-fourmolu-plugin           2.2.0.0-17            2.3.0.0-5
             haskell-hls-gadt-plugin           2.2.0.0-17            2.3.0.0-5
                   haskell-hls-graph           2.2.0.0-12            2.3.0.0-4
            haskell-hls-hlint-plugin           2.2.0.0-16            2.3.0.0-5
      haskell-hls-module-name-plugin           2.2.0.0-16            2.3.0.0-5
           haskell-hls-ormolu-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-overloaded-record-dot-plugin       2.2.0.0-16            2.3.0.0-5
              haskell-hls-plugin-api           2.2.0.0-15            2.3.0.0-4
          haskell-hls-pragmas-plugin           2.2.0.0-16            2.3.0.0-5
haskell-hls-qualify-imported-names-plugin      2.2.0.0-16            2.3.0.0-5
         haskell-hls-refactor-plugin           2.2.0.0-17            2.3.0.0-5
           haskell-hls-rename-plugin           2.2.0.0-17            2.3.0.0-5
           haskell-hls-retrie-plugin           2.2.0.0-17            2.3.0.0-5
           haskell-hls-splice-plugin           2.2.0.0-17            2.3.0.0-5
  haskell-hls-stylish-haskell-plugin           2.2.0.0-16            2.3.0.0-5
              haskell-hls-test-utils           2.2.0.0-16            2.3.0.0-5
                     haskell-hoauth2            2.14.0-16            2.14.0-19
                    haskell-hopenpgp           2.10.1-121           2.10.1-124
                       haskell-hpack            0.38.0-21            0.38.0-24
                       haskell-hslua            2.3.0-203            2.3.0-206
                 haskell-hslua-aeson           2.3.1.1-51           2.3.1.1-54
               haskell-hslua-classes             2.3.1-30             2.3.1-31
                  haskell-hslua-core             2.3.2-34             2.3.2-35
                  haskell-hslua-list             1.1.4-29             1.1.4-30
           haskell-hslua-marshalling            2.3.1-141            2.3.1-142
      haskell-hslua-module-doclayout             1.2.0-11             1.2.0-14
           haskell-hslua-module-path            1.1.1-105            1.1.1-108
         haskell-hslua-module-system             1.1.2-54             1.1.2-55
           haskell-hslua-module-text          1.1.0.1-168          1.1.0.1-169
        haskell-hslua-module-version            1.1.1-147            1.1.1-150
            haskell-hslua-module-zip             1.1.3-47             1.1.3-48
     haskell-hslua-objectorientation             2.3.1-49             2.3.1-50
             haskell-hslua-packaging            2.3.1-151            2.3.1-152
                  haskell-hslua-repl            0.1.2-147            0.1.2-148
                haskell-hslua-typing            0.1.1-143            0.1.1-144
                   haskell-hspec-wai           0.11.1-639           0.11.1-642
              haskell-hspec-wai-json           0.11.0-710           0.11.0-713
                haskell-hsyaml-aeson           0.2.0.2-58           0.2.0.2-60
                         haskell-htf          0.15.0.2-68          0.15.0.2-70
                haskell-html-conduit          1.3.2.2-388          1.3.2.2-390
                        haskell-http         4000.4.1-398         4000.4.1-401
                 haskell-http-client            0.7.19-58            0.7.19-60
      haskell-http-client-restricted            0.1.0-198            0.1.0-201
             haskell-http-client-tls          0.3.6.4-137          0.3.6.4-140
                haskell-http-conduit          2.3.9.1-197          2.3.9.1-200
               haskell-http-download          0.2.1.0-327          0.2.1.0-330
                haskell-http-streams          0.8.9.9-292          0.8.9.9-295
                       haskell-http2             5.1.0-17             5.1.0-19
                       haskell-http3             0.0.9-21             0.0.9-23
                  haskell-httpd-shed          0.4.1.2-108          0.4.1.2-109
               haskell-hw-fingertree          0.1.2.1-194          0.1.2.1-196
           haskell-hw-hspec-hedgehog          0.1.1.1-213          0.1.1.1-215
                     haskell-hw-prim          0.6.3.2-213          0.6.3.2-215
                         haskell-hxt         9.3.1.22-234         9.3.1.22-235
                haskell-implicit-hie           0.1.4.0-78           0.1.4.0-80
         haskell-implicit-hie-cradle          0.5.0.1-192          0.5.0.1-194
          haskell-incremental-parser            0.5.1-166            0.5.1-167
   haskell-insert-ordered-containers          0.2.5.3-200          0.2.5.3-203
                 haskell-interpolate            0.2.1-468            0.2.1-469
    haskell-interpolatedstring-perl6            1.0.2-405            1.0.2-406
                   haskell-invariant             0.6.4-94             0.6.4-95
                       haskell-ipynb              0.2-283              0.2-285
              haskell-ipython-kernel           0.12.0.0-8          0.12.0.0-10
           haskell-isomorphism-class             0.1.1-92             0.1.1-94
                 haskell-ixset-typed          0.5.1.0-314          0.5.1.0-316
                        haskell-jose             0.10-256             0.10-259
                   haskell-js-jquery            3.7.1-107            3.7.1-110
              haskell-kan-extensions             5.2.7-85             5.2.7-87
                        haskell-keys             3.12.5-5             3.12.5-6
                    haskell-kvitable            1.1.1.1-7           1.1.1.1-10
           haskell-lambdabot-trusted          5.3.1.2-244          5.3.1.2-247
                  haskell-lambdahack         0.11.0.1-190         0.11.0.1-193
             haskell-language-server           2.2.0.0-19            2.3.0.0-5
                    haskell-lattices             2.2.1-96             2.2.1-97
                        haskell-lens              5.3.4-1              5.3.4-3
                 haskell-lens-action            0.2.6-329            0.2.6-331
                  haskell-lens-aeson            1.2.3-202            1.2.3-205
                     haskell-libyaml            0.1.4-161            0.1.4-163
                      haskell-linear            1.23.2-47            1.23.2-49
                      haskell-list-t           1.0.5.7-63           1.0.5.7-65
                    haskell-lrucache           1.2.0.1-26           1.2.0.1-27
                         haskell-lsp           2.2.0.0-10           2.2.0.0-13
                    haskell-lsp-test          0.16.0.0-11          0.16.0.0-14
                   haskell-lsp-types            2.0.2.0-9           2.0.2.0-12
               haskell-lua-arbitrary          1.0.1.1-135            1.0.1.2-1
                  haskell-lumberjack          1.0.3.0-172          1.0.3.0-173
                  haskell-microaeson           0.1.0.3-43           0.1.0.3-45
             haskell-microlens-aeson            2.5.2-151            2.5.2-153
                 haskell-microstache          1.0.2.3-212          1.0.2.3-214
                  haskell-mime-types            0.1.2.0-4            0.1.2.1-1
                       haskell-mmark          0.0.7.6-346          0.0.7.6-348
                         haskell-mod           0.2.1.0-30           0.2.1.0-32
                  haskell-modern-uri          0.3.6.1-147          0.3.6.1-148
              haskell-monad-dijkstra          0.1.1.5-193          0.1.1.5-195
                haskell-monad-logger           0.3.42-113           0.3.42-115
            haskell-mono-traversable         1.0.21.0-135         1.0.21.0-137
  haskell-mono-traversable-instances          0.1.1.0-386          0.1.1.0-389
                    haskell-mustache           2.4.3.1-72           2.4.3.1-76
          haskell-mutable-containers          0.3.4.1-242          0.3.4.1-244
                  haskell-named-text           1.2.2.0-13           1.2.2.0-16
          haskell-neat-interpolation          0.5.1.4-199          0.5.1.4-201
                 haskell-network-uri          2.6.4.2-137          2.6.4.2-138
                        haskell-oeis           0.3.10.2-6           0.3.10.2-9
                   haskell-one-liner              2.1.1-2              2.1.1-3
             haskell-optparse-simple          0.1.1.4-535          0.1.1.4-538
                      haskell-ormolu           0.6.0.0-13           0.6.0.0-15
                       haskell-pager          0.1.1.0-218          0.1.1.0-220
                      haskell-pandoc               3.5-12                3.6-2
           haskell-pandoc-lua-engine             0.3.3-14                0.4-2
          haskell-pandoc-lua-marshal             0.2.9-15              0.3.0-1
               haskell-pandoc-server           0.1.0.10-3           0.1.0.10-9
                haskell-pandoc-types           1.23.1-164           1.23.1-166
                      haskell-pantry           0.8.2.2-32           0.8.2.2-36
         haskell-parameterized-utils           2.1.11.0-9          2.1.11.0-12
                        haskell-path              0.9.6-9             0.9.6-11
                     haskell-path-io            1.8.2-140            1.8.2-142
                  haskell-persistent          2.14.5.2-58          2.14.5.2-61
            haskell-persistent-mysql         2.13.1.5-100         2.13.1.5-103
       haskell-persistent-postgresql          2.13.5.2-24          2.13.5.2-27
               haskell-persistent-qq          2.12.0.7-73          2.12.0.7-76
           haskell-persistent-sqlite          2.13.1.1-66          2.13.1.1-69
             haskell-persistent-test         2.13.1.3-208         2.13.1.3-211
                  haskell-pipes-http            1.0.6-770            1.0.6-773
                     haskell-pointed            5.0.5-125            5.0.5-127
           haskell-postgresql-binary           0.12.5-267           0.12.5-270
           haskell-postgresql-simple          0.6.5.1-112          0.6.5.1-114
        haskell-prettyprinter-interp          0.2.0.0-157          0.2.0.0-158
                   haskell-prim-uniq              0.2-250              0.2-252
            haskell-primitive-extras         0.10.2.2-131         0.10.2.2-134
                 haskell-profunctors             5.6.3-82             5.6.3-83
            haskell-project-template          0.2.1.0-508          0.2.1.0-510
                         haskell-ptr         0.16.8.7-128         0.16.8.7-130
                        haskell-quic             0.1.27-3             0.1.27-5
          haskell-quickcheck-classes          0.6.5.0-342          0.6.5.0-344
                         haskell-ral             0.2.2-54             0.2.2-56
                      haskell-rebase            1.20.2-14            1.20.2-16
                   haskell-recaptcha          0.1.0.4-379          0.1.0.4-382
           haskell-recursion-schemes            5.2.3-141            5.2.3-142
                    haskell-reducers           3.12.5-125           3.12.5-126
                    haskell-refinery          0.4.0.0-317          0.4.0.0-318
                         haskell-req            3.13.4-32            3.13.4-35
                        haskell-rere           0.2.0.2-13           0.2.0.2-15
                    haskell-rerebase            1.20.2-14            1.20.2-16
                      haskell-retrie            1.2.3-159            1.2.3-161
                 haskell-rio-orphans          0.1.2.0-486          0.1.2.0-488
             haskell-rio-prettyprint           0.1.8.0-69           0.1.8.0-71
                   haskell-row-types           1.0.1.2-66           1.0.1.2-68
                    haskell-safecopy          0.10.4.3-57          0.10.4.3-59
                       haskell-sandi              0.5-597              0.5-599
                    haskell-sandwich           0.2.2.0-20           0.2.2.0-22
                      haskell-scotty             0.22-203             0.22-206
                        haskell-sdl2          2.5.5.1-128          2.5.5.1-131
                    haskell-sdl2-ttf            2.1.3-278            2.1.3-281
                   haskell-semialign             1.3.1-58             1.3.1-59
               haskell-semigroupoids              6.0.2-3              6.0.2-4
                   haskell-serialise          0.2.6.1-174          0.2.6.1-176
                     haskell-servant          0.20.3.0-52          0.20.3.0-54
              haskell-servant-client          0.20.3.0-67          0.20.3.0-71
         haskell-servant-client-core          0.20.3.0-52          0.20.3.0-54
              haskell-servant-server          0.20.3.0-67          0.20.3.0-70
             haskell-servant-swagger            1.2.1-153            1.2.1-156
                       haskell-shake           0.19.6-387           0.19.6-390
                 haskell-shakespeare             2.1.7-14            2.1.7.1-2
             haskell-simple-sendfile           0.2.32-196           0.2.32-198
                 haskell-skylighting             0.14.4-3             0.14.4-5
            haskell-skylighting-core             0.14.4-3             0.14.4-5
     haskell-skylighting-format-ansi              0.1-293              0.1-295
haskell-skylighting-format-blaze-html         0.1.1.3-147          0.1.1.3-149
  haskell-skylighting-format-context          0.1.0.2-257          0.1.0.2-259
    haskell-skylighting-format-latex              0.1-292              0.1-294
                   haskell-snap-core          1.0.5.1-210          1.0.5.1-211
                 haskell-snap-server          1.1.2.1-362          1.1.2.1-365
                   haskell-sourcemap            0.1.7-299            0.1.7-301
                    haskell-src-meta            0.8.15-90            0.8.15-91
                  haskell-statistics           0.16.4.0-9          0.16.4.0-11
        haskell-status-notifier-item            0.3.2.0-2            0.3.2.0-5
              haskell-stm-containers          1.2.1.1-160          1.2.1.1-164
                    haskell-stm-hamt          1.2.1.1-132              1.2.2-3
                       haskell-store           0.7.20-137           0.7.20-139
                     haskell-streams            3.3.3-125            3.3.3-127
                 haskell-strict-list          0.1.7.6-132          0.1.7.6-134
          haskell-string-interpolate          0.3.4.0-143          0.3.4.0-144
                  haskell-structured            0.1.1-319            0.1.1-321
                    haskell-summoner            2.1.0.0-2            2.1.0.0-6
                haskell-summoner-tui            2.1.0.0-2            2.1.0.0-6
                    haskell-swagger2            2.8.10-98           2.8.10-101
           haskell-tagstream-conduit            0.5.6-536            0.5.6-538
haskell-tamarin-prover-accountability            1.12.0-6             1.12.0-8
       haskell-tamarin-prover-export             1.12.0-6             1.12.0-8
        haskell-tamarin-prover-sapic             1.12.0-6             1.12.0-8
         haskell-tamarin-prover-term             1.12.0-6             1.12.0-8
       haskell-tamarin-prover-theory             1.12.0-6             1.12.0-8
        haskell-tamarin-prover-utils             1.12.0-6             1.12.0-8
                 haskell-tar-conduit            0.4.1-191            0.4.1-193
             haskell-tasty-checklist           1.0.8.0-10           1.0.8.0-13
                 haskell-tasty-hslua            1.1.1-139            1.1.1-140
                   haskell-tasty-lua           1.1.1.1-72           1.1.1.1-73
                 haskell-tasty-sugar           2.2.2.1-85           2.2.2.1-88
                     haskell-tdigest            0.3.1-150            0.3.1-152
                     haskell-texmath         0.12.8.11-15          0.12.8.12-1
                haskell-text-builder            0.6.7-283            0.6.7-285
            haskell-text-builder-dev          0.3.3.2-244          0.3.3.2-246
                   haskell-th-compat             0.1.6-87              0.1.7-1
                  haskell-th-desugar               1.16-3               1.16-4
                      haskell-th-env            0.1.1-164            0.1.1-165
                  haskell-th-orphans            0.13.17-4            0.13.17-5
                haskell-th-utilities          0.2.5.2-102          0.2.5.2-103
                         haskell-tls             2.0.6-71             2.0.6-73
         haskell-tls-session-manager             0.0.6-21             0.0.6-23
                   haskell-tree-diff          0.3.0.1-229              0.3.1-3
                    haskell-trifecta            2.1.4-174            2.1.4-176
                      haskell-turtle            1.6.2-161            1.6.2-162
                       haskell-typst               0.6-19              0.6.1-1
               haskell-typst-symbols              0.1.6-2              0.1.7-1
        haskell-uri-bytestring-aeson          0.1.0.9-133          0.1.0.9-135
                  haskell-uri-encode          1.5.0.7-319          1.5.0.7-320
                         haskell-vec             0.5.1-52             0.5.1-54
           haskell-vector-algorithms          0.9.1.0-123          0.9.1.0-125
              haskell-vector-builder          0.3.8.6-139          0.3.8.6-141
            haskell-vector-instances             3.4.3-77             3.4.3-79
                haskell-vector-sized            1.6.1-155            1.6.1-157
            haskell-wai-app-file-cgi            3.1.11-20            3.1.11-23
              haskell-wai-app-static            3.1.9-233            3.1.9-236
                 haskell-wai-conduit          3.0.0.4-714          3.0.0.4-716
                   haskell-wai-extra            3.1.18-41            3.1.18-44
          haskell-wai-handler-launch          3.0.3.1-811          3.0.3.1-814
             haskell-wai-http2-extra            0.1.3-376            0.1.3-379
       haskell-wai-middleware-static            0.9.3-192            0.9.3-195
                        haskell-warp             3.4.0-19             3.4.0-22
                   haskell-warp-quic            0.0.0-435            0.0.0-438
                    haskell-warp-tls            3.4.9-191            3.4.9-194
                       haskell-weigh           0.0.18-122           0.0.18-124
                       haskell-what4               1.6-78               1.6-81
                   haskell-wide-word           0.1.8.1-33           0.1.8.1-35
                   haskell-with-utf8          1.1.0.0-131          1.1.0.0-132
            haskell-wl-pprint-extras          3.5.0.5-560          3.5.0.5-561
          haskell-wl-pprint-terminfo          3.7.1.4-560          3.7.1.4-561
                        haskell-wreq            0.5.4.4-3            0.5.4.4-7
                        haskell-wuss           2.0.1.6-31           2.0.1.6-33
                      haskell-xcffib             1.6.1-14             1.6.1-15
           haskell-xdg-desktop-entry            0.1.1.3-2            0.1.1.3-3
                 haskell-xml-conduit          1.9.1.4-150          1.9.1.4-152
                  haskell-xml-hamlet            0.5.0.3-8           0.5.0.3-11
                      haskell-xmlgen          0.6.2.2-191          0.6.2.2-192
                haskell-xss-sanitize          0.3.7.2-131          0.3.7.2-132
                        haskell-yaml        0.11.11.2-205        0.11.11.2-207
                       haskell-yesod          1.6.2.1-460          1.6.2.1-464
                  haskell-yesod-auth         1.6.11.3-282         1.6.11.3-286
                  haskell-yesod-core         1.6.27.1-115         1.6.27.1-119
                  haskell-yesod-form            1.7.9.2-2            1.7.9.2-6
            haskell-yesod-persistent          1.6.0.8-520          1.6.0.8-524
                haskell-yesod-static          1.6.1.0-979          1.6.1.0-983
                  haskell-yesod-test           1.6.23-134           1.6.23-138
                           hedgewars             1.0.3-19             1.0.3-21
                               hefur               1.0-35               1.0-36
                               hepmc              3.3.1-7              3.3.1-8
                          hepmc-docs              3.3.1-7              3.3.1-8
                             hindent              6.1.1-6              6.1.1-8
                               hiprt      3.1.0.cb09c56-2      3.1.0.cb09c56-3
                             hledger               1.52-6              1.52-10
                        hledger-iadd            1.3.22-17            1.3.22-19
                          hledger-ui               1.52-7              1.52-11
                         hledger-web              1.52-10              1.52-14
                               hlint              3.6.1-8             3.6.1-10
                              hoogle         5.0.18.4-265         5.0.18.4-268
                      hopenpgp-tools           0.23.11-40           0.23.11-44
              hsa-amd-aqlprofile-bin              7.1.0-1              7.1.0-2
                           hslua-cli             1.4.3-87             1.4.3-88
                       i3status-rust             0.36.0-1             0.36.1-1
                               iaito              5.9.9-1              6.1.2-1
                      ibus-libpinyin             1.16.0-4             1.16.1-1
                               idris            1.3.4-478            1.3.4-481
                            ihaskell           0.13.0.0-9          0.13.0.0-12
                               incus             6.22.0-1             6.23.0-1
                         incus-tools             6.22.0-1             6.23.0-1
                              jasper              4.2.8-1              4.2.9-1
                          jasper-doc              4.2.8-1              4.2.9-1
                     jellyfin-ffmpeg          1:7.1.3p3-2          1:7.1.3p4-1
                                jolt              1.2.0-2              1.2.0-3
                               kicad             10.0.0-1             10.0.0-2
                          kitinerary            25.12.3-2            25.12.3-3
                              kmonad             0.4.4-89             0.4.4-91
                       kosmindoormap            25.12.3-1            25.12.3-2
                   libedataserverui4             3.58.3-1             3.58.3-2
                               libhx                5.3-1                5.4-1
              libperconaserverclient            8.4.8_8-1            8.4.8_8-2
                      libphonenumber           1:9.0.27-1           1:9.0.27-2
                            libsbsms              2.3.0-5              2.3.0-6
                           libsigrok             0.5.2-25             0.5.2-26
                           libtg_owt    0.git33.26068e2-1    0.git33.26068e2-2
                              libvlc             3.0.22-1             3.0.22-2
                              libvpx             1.16.0-2             1.16.0-3
                      libwireplumber             0.5.13-2             0.5.14-1
                              libwmf             0.2.13-4             0.2.14-1
                              libxdp              1.6.2-1              1.6.3-1
                          lincity-ng             2.14.2-2             2.14.2-3
                           lostfiles               4.14-1               4.15-1
                        lua-luarocks             3.13.0-4             3.13.0-5
                      lua51-luarocks             3.13.0-4             3.13.0-5
                      lua52-luarocks             3.13.0-4             3.13.0-5
                      lua53-luarocks             3.13.0-4             3.13.0-5
                      lua54-luarocks             3.13.0-4             3.13.0-5
                              luajit2.1.1774638290+fbb36bb-12.1.1774896198+18b087c-1
                            luarocks             3.13.0-4             3.13.0-5
                                mako             1.10.0-1             1.11.0-1
                              marble            25.12.3-1            25.12.3-2
                       marble-behaim            25.12.3-1            25.12.3-2
                       marble-common            25.12.3-1            25.12.3-2
                         marble-maps            25.12.3-1            25.12.3-2
                           marble-qt            25.12.3-1            25.12.3-2
                              maxima             5.49.0-7             5.49.0-8
                          maxima-ecl             5.49.0-7             5.49.0-8
                          maxima-fas             5.49.0-7             5.49.0-8
                         maxima-sbcl             5.49.0-7             5.49.0-8
                             melange             0.46.1-1             0.47.0-1
                          merkaartor            0.20.0-20            0.20.0-21
                               mgard              1.6.0-5              1.6.0-6
                           mighttpd2             4.0.4-25             4.0.4-28
                            migraphx              7.2.0-1              7.2.0-2
                           miniupnpd              2.3.9-2             2.3.10-1
                                mise           2026.3.8-1          2026.3.17-1
                               mixxx              2.5.4-2              2.5.4-3
                     mkdocs-material              9.7.5-1              9.7.6-1
                                moor             2.11.1-1             2.12.0-1
                                mosh             1.4.0-28             1.4.0-29
                           mosquitto             2.0.22-2              2.1.2-1
                              mumble            1.5.857-5            1.5.857-6
                       mumble-server            1.5.857-5            1.5.857-6
                              nageru              2.3.2-2              2.3.2-3
                                ncnn           20260113-3           20260113-4
                               ndctl                 82-1                 83-1
                             neovide             0.15.2-2             0.16.0-1
                              neovim             0.11.6-1             0.11.7-1
                             netdata              2.9.0-1              2.9.0-2
               netfilter-fullconenat      r73.0cf3b48-503      r73.0cf3b48-504
                    nextcloud-client           2:33.0.0-1           2:33.0.1-1
                             ngspice               45.2-2                 46-1
                              nickel             1.16.0-2             1.16.0-3
                         nickel-docs             1.16.0-2             1.16.0-3
              nickel-language-server             1.16.0-2             1.16.0-3
                         nodejs-yaml              2.3.1-1              2.3.2-1
                   npm-check-updates             19.5.0-1             19.6.0-1
                                nrpe              4.1.1-1              4.1.2-1
                              nsjail               3.4-22               3.4-23
                              ollama             0.18.3-1             0.19.0-1
                         ollama-cuda             0.18.3-1             0.19.0-1
                         ollama-docs             0.18.3-1             0.19.0-1
                         ollama-rocm             0.18.3-1             0.19.0-1
                       ollama-vulkan             0.18.3-1             0.19.0-1
                                onnx           1:1.20.1-1           1:1.20.1-2
                     onnxruntime-cpu             1.24.4-3             1.24.4-4
                    onnxruntime-cuda             1.24.4-3             1.24.4-4
                onnxruntime-opt-cuda             1.24.4-3             1.24.4-4
                onnxruntime-opt-rocm             1.24.4-3             1.24.4-4
                    onnxruntime-rocm             1.24.4-3             1.24.4-4
                   open-policy-agent             1.15.0-1             1.15.1-1
                            opencode              1.3.3-1              1.3.8-1
                              opencv             4.13.0-3             4.13.0-4
                         opencv-cuda             4.13.0-3             4.13.0-4
                      opencv-samples             4.13.0-3             4.13.0-4
                             openrgb             1.0rc2-5             1.0rc2-6
                          pandoc-cli               3.5-18                3.6-2
                     pandoc-crossref           0.3.19-182           0.3.19-188
                         pandoc-plot            1.9.1-256            1.9.1-263
                         pandora_box             0.20.0-1             0.20.1-1
                            paraview             6.0.1-10             6.0.1-11
                            pd-sfizz             1.2.3-12             1.2.3-13
                      percona-server            8.4.8_8-1            8.4.8_8-2
              percona-server-clients            8.4.8_8-1            8.4.8_8-2
             perl-business-isbn-data       20260325.001-1       20260328.001-1
                         perl-libwww               6.81-2               6.82-1
                     perl-xml-parser               2.48-1               2.49-1
                            php-grpc             1.78.1-2             1.80.0-1
                     php-legacy-grpc             1.78.1-2             1.80.0-1
                     platformio-core             6.1.19-1             6.1.19-3
                platformio-core-udev             6.1.19-1             6.1.19-3
                      podman-desktop             1.25.1-1             1.26.2-1
                           postgrest           10.0.0-532             10.1.0-2
                            protobuf               33.1-4               34.1-1
                          protobuf-c              1.5.2-8              1.5.2-9
                      proton-vpn-cli              0.1.7-1              0.1.8-1
                  proton-vpn-gtk-app             4.15.0-1             4.15.1-1
                   protonmail-bridge             3.23.1-1             3.23.1-2
              protonmail-bridge-core             3.23.1-1             3.23.1-2
                        prusa-slicer              2.9.4-7              2.9.4-8
                           pt2-clone               1.85-1               1.87-1
                     python-cairosvg              2.8.2-1              2.9.0-1
                 python-cinderclient              9.7.0-1              9.8.0-1
                   python-cloudflare             2.15.1-1             2.16.0-1
               python-configargparse              1.7.3-1              1.7.4-1
                    python-curl_cffi             0.14.0-6             0.14.0-7
                     python-deepdiff              8.1.1-1              8.2.0-1
                     python-eth-hash              0.7.1-1              0.8.0-1
                        python-faker             40.9.0-1            40.10.0-1
                  python-fastnumbers              5.1.1-2              5.1.1-3
                     python-flasgger            0.9.7.1-7                    -
                python-flask-restful             0.3.10-6                    -
                        python-gdstk             0.9.46-1             0.9.47-1
     python-googleapis-common-protos             1.73.0-1             1.73.1-1
                       python-grpcio             1.78.1-2             1.80.0-1
                 python-grpcio-tools             1.78.1-2             1.80.0-1
                     python-identify             2.6.17-1             2.6.18-2
           python-importlib-metadata              8.7.1-3              9.0.0-1
                  python-json-logger              4.0.0-1              4.1.0-1
                         python-lmdb              2.1.1-1              2.2.0-1
                      python-mockito              2.0.0-1              2.0.1-1
                     python-narwhals             2.18.0-1             2.18.1-1
                        python-numpy              2.4.3-1              2.4.4-1
                         python-onnx           1:1.20.1-1           1:1.20.1-2
              python-onnxruntime-cpu             1.24.4-3             1.24.4-4
             python-onnxruntime-cuda             1.24.4-3             1.24.4-4
         python-onnxruntime-opt-cuda             1.24.4-3             1.24.4-4
         python-onnxruntime-opt-rocm             1.24.4-3             1.24.4-4
             python-onnxruntime-rocm             1.24.4-3             1.24.4-4
                       python-opencv             4.13.0-3             4.13.0-4
                  python-opencv-cuda             4.13.0-3             4.13.0-4
              python-openstackclient              8.0.0-1              8.1.0-1
                 python-openstacksdk              4.4.0-2              4.5.0-1
                       python-orjson             3.11.7-1             3.11.7-2
                    python-oslo-i18n              6.7.1-1              6.7.2-1
                      python-plexapi             4.18.0-1             4.18.1-1
                      python-protego              0.4.0-1              0.5.0-1
                     python-protobuf               33.1-4               34.1-1
          python-proton-vpn-api-core             4.16.0-1             4.17.2-1
                 python-pychromecast             14.0.9-4            14.0.10-1
                python-pydantic-core           3:2.41.5-3           3:2.41.5-4
                       python-pygit2             1.19.1-2             1.19.2-1
                     python-pypandoc             1.16.2-1               1.17-1
                     python-pypubsub             4.0.3-11              4.0.4-1
                       python-pysdl3           0.9.10b0-1           0.9.11b0-1
                      python-pytorch             2.10.0-3             2.10.0-4
                 python-pytorch-cuda             2.10.0-3             2.10.0-4
                  python-pytorch-opt             2.10.0-3             2.10.0-4
             python-pytorch-opt-cuda             2.10.0-3             2.10.0-4
             python-pytorch-opt-rocm             2.10.0-3             2.10.0-4
                 python-pytorch-rocm             2.10.0-3             2.10.0-4
                        python-regex          2026.2.28-1          2026.3.32-1
                     python-requests             2.32.5-4             2.33.1-1
              python-setuptools-rust             1.12.0-3             1.12.1-1
                        python-sybil              6.1.1-2              7.0.0-1
                    python-testtools              2.8.3-2              2.8.4-1
                      python-textual              8.1.1-1              8.2.1-1
                        python-tomli              2.4.0-1              2.4.1-1
                          python-tox             4.32.0-1             4.33.0-1
                       python-triton              3.5.1-3              3.5.1-4
                        python-urwid              3.0.5-1              4.0.0-1
                   python-validators             0.30.0-1             0.31.0-1
                        python-w3lib              2.3.0-2              2.3.1-1
                     python-werkzeug              3.1.5-1              3.1.6-1
                    python-z3-solver             4.15.4-2             4.16.0-1
                                qgis              4.0.0-1              4.0.0-2
                            qt6-grpc             6.11.0-1             6.11.0-2
                          quickshell              0.2.1-5              0.2.1-6
                           qwen-code             0.13.1-1             0.13.2-1
                            r2ghidra              5.9.8-1              6.1.2-1
                             radare2              5.9.8-1              6.1.2-1
                               razor               2.86-3               2.87-2
                                 re2       2:2025.11.05-1       2:2025.11.05-3
                              reaper               7.66-1               7.67-1
                               rizin              0.8.1-2              0.8.2-1
                               rocal              7.2.0-1              7.2.0-2
                          rofi-emoji              4.1.0-2              4.1.0-3
                          rpi-imager              2.0.6-2              2.0.6-3
                          rubberband              4.0.0-1              4.0.0-2
                   rubberband-ladspa              4.0.0-1              4.0.0-2
                      rubberband-lv2              4.0.0-1              4.0.0-2
                     rubberband-vamp              4.0.0-1              4.0.0-2
                    ruby-addressable              2.8.8-1              2.8.9-1
                          ruby-async             2.34.0-1             2.38.1-1
                ruby-async-container             0.31.0-1             0.34.4-1
                     ruby-async-pool             0.11.1-1             0.11.2-1
                  ruby-async-service             0.19.1-1             0.21.0-1
                     ruby-chef-utils            19.2.27-1            19.2.32-1
                ruby-google-protobuf               33.1-4               34.1-1
                           ruby-grpc             1.78.1-1             1.80.0-1
                       ruby-io-event             1.14.2-1             1.14.5-1
                         ruby-loofah             2.25.0-1             2.25.1-1
                            ruby-lsp             0.26.6-1             0.26.9-1
                       ruby-maxitest              6.1.0-1              6.2.0-1
            ruby-net-http-persistent              4.0.7-1              4.0.8-1
                  ruby-protocol-http             0.59.0-1             0.60.0-1
                  ruby-protocol-rack             0.21.1-1             0.22.0-1
                  ruby-public_suffix              7.0.2-1              7.0.5-1
           ruby-rails-html-sanitizer              1.6.2-3              1.7.0-1
            ruby-repl_type_completor             0.1.13-1             0.1.15-1
                         ruby-sequel             5.99.0-1            5.101.0-1
                 ruby-sorbet-runtime          0.6.12942-1          0.6.13068-1
                        ruby-sqlite3              2.9.1-1              2.9.2-1
        ruby-sus-fixtures-async-http             0.12.0-1             0.12.1-1
                       ruby-zeitwerk              2.7.3-1              2.7.5-1
                      rustypaste-cli              0.9.4-1              0.9.5-1
                           rz-cutter              2.4.1-5              2.4.1-6
                                sbcl              2.6.2-1              2.6.3-1
                           scap-dkms             0.20.0-9             0.23.1-1
                             scummvm           2026.1.0-1           2026.2.0-1
                          sentry-cli              3.3.4-1              3.3.5-1
                       sentry-native             0.13.3-1             0.13.4-1
                               sfizz              1.2.3-8             1.2.3-10
                           sfizz-lib              1.2.3-8             1.2.3-10
                           sfizz-lv2             1.2.3-12             1.2.3-13
                    sfizz-standalone              1.2.3-8             1.2.3-10
                            sfizz-ui             1.2.3-12             1.2.3-13
                          sfizz-vst3             1.2.3-12             1.2.3-13
                         shadowsocks    3.0.0a.20180219-9                    -
                          shellcheck            0.11.0-79            0.11.0-81
                            skaffold             2.18.0-1             2.18.2-1
                                skim              4.0.1-1              4.2.0-1
                         slicer-udev              2.9.4-7              2.9.4-8
                            smplayer             25.6.0-1             25.6.0-2
                            soapyuhd             0.4.1-14             0.4.1-15
                      spotify-player             0.22.1-1             0.23.0-1
                           sqlcipher             4.13.0-1             4.14.0-1
                            sqlfluff              4.0.4-2              4.1.0-1
                             sslscan              2.2.1-1              2.2.2-1
                               stack          2.9.3.1-118          2.9.3.1-123
                             step-ca             0.29.0-1             0.30.2-1
                          strongswan              6.0.4-2              6.0.5-1
                             stumpwm              24.11-9             24.11-10
                     stylish-haskell          0.14.5.0-11          0.14.5.0-13
                               swtpm             0.10.1-1             0.10.1-2
                                 syd             3.51.0-1             3.51.2-1
                           syslog-ng             4.11.0-1             4.11.0-2
                      syslog-ng-amqp             4.11.0-1             4.11.0-2
                    syslog-ng-geoip2             4.11.0-1             4.11.0-2
                     syslog-ng-kafka             4.11.0-1             4.11.0-2
                   syslog-ng-mongodb             4.11.0-1             4.11.0-2
                    syslog-ng-python             4.11.0-1             4.11.0-2
                     syslog-ng-redis             4.11.0-1             4.11.0-2
                      syslog-ng-smtp             4.11.0-1             4.11.0-2
                      syslog-ng-snmp             4.11.0-1             4.11.0-2
                       syslog-ng-sql             4.11.0-1             4.11.0-2
                             systing              1.0.0-1              1.0.0-2
                            taffybar             4.1.0-13             4.1.0-18
                      tamarin-prover            1.12.0-10            1.12.0-14
                     taskwarrior-tui             0.26.7-1             0.26.8-1
                     tauon-music-box              9.1.1-1              9.1.2-1
                    telegram-desktop              6.6.4-6              6.6.4-7
                          terragrunt             0.99.4-2             0.99.5-1
                              thunar             4.20.7-1             4.20.8-1
                         thunderbird              149.0-1            149.0.1-1
                 thunderbird-i18n-af              149.0-1            149.0.1-1
                 thunderbird-i18n-ar              149.0-1            149.0.1-1
                thunderbird-i18n-ast              149.0-1            149.0.1-1
                 thunderbird-i18n-be              149.0-1            149.0.1-1
                 thunderbird-i18n-bg              149.0-1            149.0.1-1
                 thunderbird-i18n-br              149.0-1            149.0.1-1
                 thunderbird-i18n-ca              149.0-1            149.0.1-1
                thunderbird-i18n-cak              149.0-1            149.0.1-1
                 thunderbird-i18n-cs              149.0-1            149.0.1-1
                 thunderbird-i18n-cy              149.0-1            149.0.1-1
                 thunderbird-i18n-da              149.0-1            149.0.1-1
                 thunderbird-i18n-de              149.0-1            149.0.1-1
                thunderbird-i18n-dsb              149.0-1            149.0.1-1
                 thunderbird-i18n-el              149.0-1            149.0.1-1
              thunderbird-i18n-en-gb              149.0-1            149.0.1-1
              thunderbird-i18n-en-us              149.0-1            149.0.1-1
              thunderbird-i18n-es-ar              149.0-1            149.0.1-1
              thunderbird-i18n-es-es              149.0-1            149.0.1-1
                 thunderbird-i18n-et              149.0-1            149.0.1-1
                 thunderbird-i18n-eu              149.0-1            149.0.1-1
                 thunderbird-i18n-fi              149.0-1            149.0.1-1
                 thunderbird-i18n-fr              149.0-1            149.0.1-1
              thunderbird-i18n-fy-nl              149.0-1            149.0.1-1
              thunderbird-i18n-ga-ie              149.0-1            149.0.1-1
                 thunderbird-i18n-gd              149.0-1            149.0.1-1
                 thunderbird-i18n-gl              149.0-1            149.0.1-1
                 thunderbird-i18n-he              149.0-1            149.0.1-1
                 thunderbird-i18n-hr              149.0-1            149.0.1-1
                thunderbird-i18n-hsb              149.0-1            149.0.1-1
                 thunderbird-i18n-hu              149.0-1            149.0.1-1
              thunderbird-i18n-hy-am              149.0-1            149.0.1-1
                 thunderbird-i18n-id              149.0-1            149.0.1-1
                 thunderbird-i18n-is              149.0-1            149.0.1-1
                 thunderbird-i18n-it              149.0-1            149.0.1-1
                 thunderbird-i18n-ja              149.0-1            149.0.1-1
                 thunderbird-i18n-ka              149.0-1            149.0.1-1
                thunderbird-i18n-kab              149.0-1            149.0.1-1
                 thunderbird-i18n-kk              149.0-1            149.0.1-1
                 thunderbird-i18n-ko              149.0-1            149.0.1-1
                 thunderbird-i18n-lt              149.0-1            149.0.1-1
                 thunderbird-i18n-ms              149.0-1            149.0.1-1
              thunderbird-i18n-nb-no              149.0-1            149.0.1-1
                 thunderbird-i18n-nl              149.0-1            149.0.1-1
              thunderbird-i18n-nn-no              149.0-1            149.0.1-1
              thunderbird-i18n-pa-in              149.0-1            149.0.1-1
                 thunderbird-i18n-pl              149.0-1            149.0.1-1
              thunderbird-i18n-pt-br              149.0-1            149.0.1-1
              thunderbird-i18n-pt-pt              149.0-1            149.0.1-1
                 thunderbird-i18n-rm              149.0-1            149.0.1-1
                 thunderbird-i18n-ro              149.0-1            149.0.1-1
                 thunderbird-i18n-ru              149.0-1            149.0.1-1
                 thunderbird-i18n-sk              149.0-1            149.0.1-1
                 thunderbird-i18n-sl              149.0-1            149.0.1-1
                 thunderbird-i18n-sq              149.0-1            149.0.1-1
                 thunderbird-i18n-sr              149.0-1            149.0.1-1
              thunderbird-i18n-sv-se              149.0-1            149.0.1-1
                 thunderbird-i18n-th              149.0-1            149.0.1-1
                 thunderbird-i18n-tr              149.0-1            149.0.1-1
                 thunderbird-i18n-uk              149.0-1            149.0.1-1
                 thunderbird-i18n-uz              149.0-1            149.0.1-1
                 thunderbird-i18n-vi              149.0-1            149.0.1-1
              thunderbird-i18n-zh-cn              149.0-1            149.0.1-1
              thunderbird-i18n-zh-tw              149.0-1            149.0.1-1
                         timescaledb             2.26.0-1             2.26.1-1
             timescaledb-old-upgrade             2.26.0-1             2.26.1-1
                       tokio-console             0.1.14-1             0.1.14-2
                             traefik             3.6.11-1             3.6.12-1
                                tree              2.3.1-1              2.3.2-1
                             udiskie              2.6.1-1              2.6.2-1
                         udisks2-qt5              5.0.6-2                    -
              ultramaster-kr106-clap              2.4.4-1            2.4.6.1-1
               ultramaster-kr106-lv2              2.4.4-1            2.4.6.1-1
              ultramaster-kr106-vst3              2.4.4-1            2.4.6.1-1
                               usage             2.18.2-1              3.2.0-1
                            usbguard              1.1.4-4              1.1.4-5
                                vala            0.56.18-5            0.56.19-1
                             vcspull             1.58.0-1             1.58.1-1
                    vhba-module-dkms          20250329-70          20250329-71
                                 vim           9.2.0204-2           9.2.0272-1
                         vim-runtime           9.2.0204-2           9.2.0272-1
                                 vis 0.9.r397.gda84fe70-1 0.9.r399.g1a4fb0fd-1
             vis-syntax-highlighting 0.9.r397.gda84fe70-1 0.9.r399.g1a4fb0fd-1
                                 vlc             3.0.22-1             3.0.22-2
                             vlc-cli             3.0.22-1             3.0.22-2
                     vlc-gui-ncurses             3.0.22-1             3.0.22-2
                          vlc-gui-qt             3.0.22-1             3.0.22-2
                      vlc-gui-skins2             3.0.22-1             3.0.22-2
                   vlc-plugin-a52dec             3.0.22-1             3.0.22-2
                    vlc-plugin-aalib             3.0.22-1             3.0.22-2
                     vlc-plugin-alsa             3.0.22-1             3.0.22-2
                      vlc-plugin-aom             3.0.22-1             3.0.22-2
                  vlc-plugin-archive             3.0.22-1             3.0.22-2
                  vlc-plugin-aribb24             3.0.22-1             3.0.22-2
                  vlc-plugin-aribb25             3.0.22-1             3.0.22-2
                      vlc-plugin-ass             3.0.22-1             3.0.22-2
                    vlc-plugin-avahi             3.0.22-1             3.0.22-2
                   vlc-plugin-bluray             3.0.22-1             3.0.22-2
                     vlc-plugin-caca             3.0.22-1             3.0.22-2
                     vlc-plugin-cddb             3.0.22-1             3.0.22-2
               vlc-plugin-chromecast             3.0.22-1             3.0.22-2
                    vlc-plugin-dav1d             3.0.22-1             3.0.22-2
                     vlc-plugin-dbus             3.0.22-1             3.0.22-2
         vlc-plugin-dbus-screensaver             3.0.22-1             3.0.22-2
                      vlc-plugin-dca             3.0.22-1             3.0.22-2
                      vlc-plugin-dvb             3.0.22-1             3.0.22-2
                      vlc-plugin-dvd             3.0.22-1             3.0.22-2
                    vlc-plugin-faad2             3.0.22-1             3.0.22-2
                   vlc-plugin-ffmpeg             3.0.22-1             3.0.22-2
                 vlc-plugin-firewire             3.0.22-1             3.0.22-2
                     vlc-plugin-flac             3.0.22-1             3.0.22-2
               vlc-plugin-fluidsynth             3.0.22-1             3.0.22-2
                 vlc-plugin-freetype             3.0.22-1             3.0.22-2
                      vlc-plugin-gme             3.0.22-1             3.0.22-2
                   vlc-plugin-gnutls             3.0.22-1             3.0.22-2
                vlc-plugin-gstreamer             3.0.22-1             3.0.22-2
                  vlc-plugin-inflate             3.0.22-1             3.0.22-2
                     vlc-plugin-jack             3.0.22-1             3.0.22-2
                  vlc-plugin-journal             3.0.22-1             3.0.22-2
                     vlc-plugin-jpeg             3.0.22-1             3.0.22-2
                     vlc-plugin-kate             3.0.22-1             3.0.22-2
                  vlc-plugin-kwallet             3.0.22-1             3.0.22-2
                vlc-plugin-libsecret             3.0.22-1             3.0.22-2
                     vlc-plugin-lirc             3.0.22-1             3.0.22-2
                  vlc-plugin-live555             3.0.22-1             3.0.22-2
                      vlc-plugin-lua             3.0.22-1             3.0.22-2
                      vlc-plugin-mad             3.0.22-1             3.0.22-2
                 vlc-plugin-matroska             3.0.22-1             3.0.22-2
                     vlc-plugin-mdns             3.0.22-1             3.0.22-2
                  vlc-plugin-modplug             3.0.22-1             3.0.22-2
                    vlc-plugin-mpeg2             3.0.22-1             3.0.22-2
                   vlc-plugin-mpg123             3.0.22-1             3.0.22-2
                      vlc-plugin-mtp             3.0.22-1             3.0.22-2
                 vlc-plugin-musepack             3.0.22-1             3.0.22-2
                      vlc-plugin-nfs             3.0.22-1             3.0.22-2
                   vlc-plugin-notify             3.0.22-1             3.0.22-2
                      vlc-plugin-ogg             3.0.22-1             3.0.22-2
                     vlc-plugin-opus             3.0.22-1             3.0.22-2
                      vlc-plugin-png             3.0.22-1             3.0.22-2
                    vlc-plugin-pulse             3.0.22-1             3.0.22-2
                vlc-plugin-quicksync             3.0.22-1             3.0.22-2
               vlc-plugin-samplerate             3.0.22-1             3.0.22-2
                      vlc-plugin-sdl             3.0.22-1             3.0.22-2
                     vlc-plugin-sftp             3.0.22-1             3.0.22-2
                    vlc-plugin-shout             3.0.22-1             3.0.22-2
                      vlc-plugin-smb             3.0.22-1             3.0.22-2
                     vlc-plugin-soxr             3.0.22-1             3.0.22-2
                    vlc-plugin-speex             3.0.22-1             3.0.22-2
                      vlc-plugin-srt             3.0.22-1             3.0.22-2
                      vlc-plugin-svg             3.0.22-1             3.0.22-2
                      vlc-plugin-tag             3.0.22-1             3.0.22-2
                   vlc-plugin-theora             3.0.22-1             3.0.22-2
                  vlc-plugin-twolame             3.0.22-1             3.0.22-2
                     vlc-plugin-udev             3.0.22-1             3.0.22-2
                     vlc-plugin-upnp             3.0.22-1             3.0.22-2
                   vlc-plugin-vorbis             3.0.22-1             3.0.22-2
                      vlc-plugin-vpx             3.0.22-1             3.0.22-2
                     vlc-plugin-x264             3.0.22-1             3.0.22-2
                     vlc-plugin-x265             3.0.22-1             3.0.22-2
                      vlc-plugin-xml             3.0.22-1             3.0.22-2
                     vlc-plugin-zvbi             3.0.22-1             3.0.22-2
                     vlc-plugins-all             3.0.22-1             3.0.22-2
                    vlc-plugins-base             3.0.22-1             3.0.22-2
                   vlc-plugins-extra             3.0.22-1             3.0.22-2
            vlc-plugins-video-output             3.0.22-1             3.0.22-2
           vlc-plugins-visualization             3.0.22-1             3.0.22-2
                              vmexec              0.4.0-1              0.5.2-1
                                vpnc  1:0.5.3.r539.r239-1  1:0.5.3.r557.r241-1
                         warzone2100              4.6.3-2              4.6.3-3
                           watchexec              2.5.0-1              2.5.1-1
             webrtc-audio-processing                2.1-5                2.1-6
                         wireplumber             0.5.13-2             0.5.14-1
                    wireplumber-docs             0.5.13-2             0.5.14-1
                       wireshark-cli              4.6.4-1              4.6.4-2
                        wireshark-qt              4.6.4-1              4.6.4-2
              xdg-desktop-portal-dde             1.0.13-7             1.0.14-1
                           xdp-tools              1.6.2-1              1.6.3-1
                           xfdesktop             4.20.1-3             4.20.2-1
                              xmobar             0.50-137             0.50-141
                              xmonad           0.18.0-154           0.18.0-156
                      xmonad-contrib           0.18.1-138           0.18.1-140
                         xmonad-dbus          0.1.0.2-240          0.1.0.2-243
                       xmonad-extras             0.17.3-6             0.17.3-9
                      xorg-setxkbmap              1.3.4-2              1.3.5-1
                                 xrt          1:2.21.75-5          1:2.21.75-6
                          xtrabackup            8.4.0_5-1            8.4.0_5-2
                                  z3             4.15.4-2             4.16.0-1
                             z3-java             4.15.4-2             4.16.0-1
                             zathura         2026.02.22-1         2026.03.27-1
                          zathura-cb         2026.02.03-3         2026.02.03-4
                        zathura-djvu         2026.02.03-3         2026.02.03-4
                   zathura-pdf-mupdf         2026.02.03-5         2026.02.03-6
                 zathura-pdf-poppler         2026.02.03-3         2026.02.03-4
                          zathura-ps         2026.02.03-3         2026.02.03-4
                              zettlr              4.3.0-1              4.3.1-1
                              zypper            1.14.95-1            1.14.95-2
                            ares-emu                    -                147-2
                             diffoci                    -              0.1.8-1
                         govulncheck                    -              1.1.4-1
                       libkysdk-base                    -            3.0.1.0-1
                         librashader                    -             0.10.1-2
                       python-podman                    -              5.8.0-2
                        python-pylxd                    -              2.4.0-2
                        python-ws4py                    -              0.6.0-4
                         udisks2-qt6                    -              6.0.1-1


:: Different sync package(s) in repository multilib x86_64

-------------------------------------------------------------------------------
                             PACKAGE           2026-03-28           2026-03-31
-------------------------------------------------------------------------------
                         lib32-clang             22.1.1-1             22.1.2-1
              lib32-gst-plugins-base             1.28.1-2             1.28.1-3
         lib32-gst-plugins-base-libs             1.28.1-2             1.28.1-3
              lib32-gst-plugins-good             1.28.1-2             1.28.1-3
                     lib32-gstreamer             1.28.1-2             1.28.1-3
                        lib32-libvpx             1.15.2-2             1.16.0-2
                          lib32-llvm           1:22.1.1-1           1:22.1.2-1
                     lib32-llvm-libs           1:22.1.1-1           1:22.1.2-1

Click to view the poll.

Check if your mirror has already synced:

• Mirror-Check Service

2 posts - 2 participants

Read full topic

Read more →

The post 15-Year-Old strongSwan Flaw Lets Attackers Crash VPNs via Integer Underflow appeared first on IT Security News.

https://security-tracker.debian.org/tracker/DSA-6176-1

https://security-tracker.debian.org/tracker/DSA-6041-1

Exploitation wasn't as straight forward as I'd originally hoped but was ultimately a lot more fun than a normal, run-of-the-mill command injection. In this blog, I'll share how I was able to achieve a root shell on affected installations of Cisco ISE, including an escape from a Docker container where the command injection was actually being executed!

More on all that later, let's take a look at the initial vulnerability.

Getting Command Injection

Below is the enableStrongSwanTunnelmethod, which leads to two vulnerabilities – one being the original report ZDI received, while the other is the subject of this blog. Notably, Cisco disagreed and initially assigned the same CVE to both submissions. Was that the right call? I'll leave that judgement to the reader.

At [1] and [2] above, the originally reported unsafe deserialization is seen.

At [3], though, we see that if an attacker provides a valid serialized Java string array, that value is used to invoke a shell script.

Not only that, but the invokeStrongSwanShellScript function contained another interesting goodie:

The sudo command at [4] was even more exciting. Not only did this look very promising as a command injection vulnerability, but that code would be executed as root.

The logger.debug call at [5] looked helpful, so after reconfiguring log4j to output debug logs, I started by sending some test inputs. A quick aside:

Each of the log outputs below came from making individual POST requests to /deployment-rpc/enableStrongSwanTunnel. The body of these requests were string representations of serialized Java String[] array objects, where the first element of the array contained the command injection.

The following array, as an example, shows in the logs as configureStrongSwan.sh enable x; touch /flag when serialized and sent to that endpoint.

      String[] arr = {"x; touch /flag", ""};

For brevity, in the rest of this blog I have included only the resulting commands executed with bash via exec(). In practice, the vector for triggering each was the vulnerable enableStrongSwanTunnel endpoint.

Now, back to those test inputs:

The log looks great; clearly we can control the value of the second concat at [4] above.

Unfortunately, as the subsequent ls call shows, exploitation wasn't quite so straightforward. Because the exec command calls a bash script on disk and passes the attacker-controlled input as a parameter, we cannot simply break the exec call and execute our own code.

Instead, we need to look at configureStrongSwan.sh to see how that parameter is used.

At [1], we call the enableStrongSwan function when using the enable operation specified at [3] above. Here OPERATION is enable and IKE_ID is our attacker-controlled payload.

At [2], we see the only usage of the passed IKE_ID in the function, as a parameter to another function verifyIpsecConnectionStatus At [3] and [4], we use our attacker-controlled payload to build a swanctl command. The argument $1 at [3] corresponds to the IKE_ID parameter.

Finally, at [5], note that we run this command in the docker container: strongswan-container. This was another piece of the puzzle in place. Perhaps the code is executing in that container? Let's take a look:

Still no dice, but a step closer!

A key thing to notice above is that the vulnerable parameter IKE_ID comes from the script argument stored in the variable $2. Consider the following example from the initial test inputs above:

      configureStrongSwan.sh enable x; touch /flag

Here, arg $2 is simply x;. Not as threatening as we hoped. Additional args $3 and $4 exist containing touch and /flag.txt, but those are never used by the script.

Even when we use quotes or backticks, which prevent bash from splitting the payload, nothing happens on disk. Why is that, though? The value of arg $2 in that example tells the story:

      configureStrongSwan.sh enable "x; touch /flag"

Interestingly, the arg value $2 used as the IKE_ID in configureStrongSwan.sh is actually "x;. This is odd. Normally when sending an argument to a bash script we can expect quoted arguments to be kept together. However, it turns out that Java is handling this command differently than bash would by itself.

Tokenization in Java exec() Calls

To properly craft our final exploit, we must first understand a little bit more about how Java's exec method works. Cisco ISE uses Java 8, so let's take a look at the Open JDK code for that version:

At [5], we see that when a string command is passed to exec(), Java tokenizes it using the StringTokenizer class.

More can be read about the StringTokenizer class in Java 8 here. For the purpose of this blog, though, I'll jump right to the point:

StringTokenizer, by design, does not respect quotes or backticks. Rather, its behavior is to simply split string by the provided token (default value is \t\n\r\f, which is used the exec method). This explains why the IKE_ID value from our test inputs was simply "x; when trying to use quotation marks. By the time bash received our input, it had already been tokenized and thus wasn't parsed as one single argument.

Luckily for us, Bash comes built in with a special variable called the Internal Field Separator (${IFS}). More can be read about the purpose and function of this variable here.

For the purposes of this exploit, the usage is simple: an attacker can simply replace all spaces with ${IFS} and bash will interpret everything as expected. The following examples are effectively the same from the perspective of bash:

With the ${IFS} version, however, Java will see the entire payload as a single token, maintaining the integrity of the command.

Additionally, exec is actually working for us now, and we don't even need to include quotes. Java will tokenize our input and ensure it is passed to bash as a single argument.

We can now run the payload using the ${IFS} variable and, viola!

Finally, code execution! This wasn't quite what I was looking for yet, though. The code is executed in the context of the Docker strongswan-container, but what I really wanted was a full root shell on the ISE server host.

Escaping the Container

We can see from the host machine that strongswan-container is running as privileged:

This is quite the gift from Cisco. Because it is running as privileged, we can leverage the "User-Mode Helpers" technique described in this talk [PDF] by Brandon Edwards and Nick Freeman at Black Hat USA 2019.

I've summarized the details related to this specific container setup. More generic information can be found here. The final payload looked like this:

At [1], a Linux cgroup is mounted.

At [2], we specify a shell script simulate.sh to be executed when the cgroup is emptied.

At [3], simulate.sh is created and configured. Here, I've chosen to echo an SSH public key to the /root/.ssh/authorized_keys file on the ISE server.

At [4], empty the cgroup. This causes simulate.sh to be executed on the host ISE server as root.

Putting It All Together

The above technique is great, but we still can't use spaces. Instead of applying ${IFS} everywhere, I chose to base64-encode the container escape script. Then, the payload sent to the vulnerable endpoint could include a base64 -d call to decode the script and pipe it to bash:

echo${IFS}[base64-encoded-escape-script]${IFS}|${IFS}base64${IFS}-d${IFS}|${IFS}bash

Altogether, the final malicious request looked like this:

And, finally, a root shell!

Conclusion

This bug was a lot of fun to exploit and highlights several good-to-know techniques that can come in handy even for a relatively straightforward bug class like command injection. To summarize, an attacker can leverage a perfect storm of mistakes in Cisco Identity Services Engine to achieve full system takeover as root.

By utilizing the ${IFS} variable in bash, we could get around Java's exec method restraining us from using the space character. Additionally, although the initial command injection was executed inside of a Docker container, we were able to break out of the sandbox and execute code on the host because Cisco configured the container in privileged mode.

Finally, for those following along at home: those two bugs Cisco deemed to be duplicates of each other? They were fixed by two different code changes. The definition of "duplicate" is, again, left to the reader.

Keep an eye out for future blogs where I will go into more detail on vulnerabilities I have found in this area. Until then, you can follow me on Twitter at @bobbygould5 and follow the team on Twitter, Mastodon, LinkedIn, or Bluesky for the latest in exploit techniques and security patches.

KI generiertes Nachrichten Update

und ergänze diese durch deine Expertise. Gehe auf die Ursache der Schwachstelle, Ausnutzungsmöglichkeiten, Mitigationen und Lessons Learned ein. Der Artikel sollte für IT-Experten verständlich sein, aber auch für interessierte Personen mit technischem Hintergrund zugänglich sein.

CVE-2010-2628: Code Injection in strongSwan – Eine detaillierte Analyse

Die Sicherheitslandschaft ist geprägt von ständigen Bedrohungen und der Notwendigkeit, diese zu verstehen und abzuwehren. Im September 2010 wurde eine kritische Schwachstelle in der weit verbreiteten VPN-Software strongSwan öffentlich bekannt (CVE-2010-2628). Diese Code-Injection-Schwachstelle ermöglichte es Angreifern, beliebigen Code auf dem System auszuführen und stellt somit ein erhebliches Risiko für die Vertraulichkeit, Integrität und Verfügbarkeit von Daten dar. Dieser Artikel beleuchtet die Details dieser Schwachstelle, ihre Ausnutzungsmöglichkeiten, mögliche Gegenmaßnahmen und die daraus resultierenden Lessons Learned.

Was ist strongSwan?

strongSwan ist ein Open-Source-Softwarepaket, das eine Implementierung des IPsec-Protokolls (Internet Protocol Security) bietet. IPsec wird für die sichere Kommunikation über ungesicherte Netzwerken, wie z.B. das Internet, verwendet und dient zur Erstellung von Virtual Private Networks (VPNs). strongSwan findet in einer Vielzahl von Umgebungen Anwendung, von Unternehmensnetzwerken bis hin zu privaten Clients.

Die Schwachstelle: Code Injection im IKE Daemon

CVE-2010-2628 betrifft Versionen von strongSwan bis einschließlich 4.4.0. Das Problem liegt in der Verarbeitung von Benutzereingaben innerhalb des IKE (Internet Key Exchange) Daemons, dem Kernstück für den Aufbau und die Verwaltung von IPsec-Verbindungen. Genauer gesagt, lag das Problem in der Art und Weise, wie strongSwan bestimmte Parameter in den ISAKMP/IKE-Nachrichten verarbeitete. Die Schwachstelle erlaubte es einem Angreifer, speziell formatierte Nachrichten zu senden, die dazu führten, dass schädlicher Code vom IKE Daemon ausgeführt wurde.

• Ursache: Die Ursache der Schwachstelle lag in einer fehlenden oder unzureichenden Validierung von Benutzereingaben. Konkret war das Problem auf die Verarbeitung bestimmter Attribute in den ISAKMP-Nachrichten zurückzuführen, die nicht ausreichend gegen bösartige Eingaben abgesichert waren. Dies ermöglichte es einem Angreifer, einen Pufferüberlauf oder eine ähnliche Art von Fehler zu provozieren, der zur Codeausführung führen konnte.


• Technische Details: Der Angriff nutzte in der Regel die Möglichkeit aus, über das Internet Key Exchange (IKE) Protokoll speziell präparierte Nachrichten an den strongSwan-Daemon zu senden. Diese Nachrichten enthielten bösartigen Code, der dann durch eine unsachgemäße Verarbeitung im Daemon ausgeführt wurde. Die Schwachstelle war nicht auf bestimmte Netzwerktypen beschränkt und konnte über verschiedene Kommunikationskanäle ausgenutzt werden.

Ausnutzungsmöglichkeiten: Was kann ein Angreifer tun?

Ein erfolgreicher Angriff mit CVE-2010-2628 ermöglichte es einem Angreifer, eine Vielzahl von schädlichen Aktionen durchzuführen, darunter:

• Remote Code Execution (RCE): Der Angreifer konnte beliebigen Code auf dem System ausführen, auf dem der strongSwan IKE Daemon lief. Dies eröffnete ihm die Möglichkeit, Malware zu installieren, Daten zu stehlen oder das System vollständig zu kompromittieren.


• Denial of Service (DoS): Durch gezielte Nachrichten konnte der Angreifer den IKE Daemon zum Absturz bringen und somit die VPN-Verbindungen unterbrechen.


• Man-in-the-Middle Attacks: In einigen Fällen könnte ein Angreifer die Schwachstelle nutzen, um sich in IPsec-Tunnel einzuschleusen und den Datenverkehr abzufangen oder zu manipulieren.


• Privilege Escalation: Abhängig von den Berechtigungen des Benutzers, unter dem der strongSwan IKE Daemon lief, konnte der Angreifer seine Privilegien erweitern.

Mitigationen: Wie kann man sich schützen?

Die Behebung dieser Schwachstelle erforderte eine Kombination aus Software-Updates und Konfigurationsänderungen:

• Aktualisierung auf die neueste Version: Der wichtigste Schritt war die Aktualisierung von strongSwan auf eine Version, die das Problem behoben hat. Versionen ab 5.0.1 waren sicher.


• Konfigurationshärtung: Neben dem Software-Update sollten auch Konfigurationseinstellungen überprüft und gehärtet werden:
  
  
  
  • Restriktive Zugriffskontrollen: Beschränkung der Zugriffe auf den IKE Daemon auf autorisierte Clients.
  
  
  • Firewall-Regeln: Implementierung von Firewall-Regeln, die unerwünschte Verbindungen blockieren.
  
  
  • Deaktivierung unnötiger Features: Deaktivierung von Funktionen, die nicht benötigt werden und potenzielle Angriffsflächen darstellen können.
  
  
  
  


• Intrusion Detection Systems (IDS): Einsatz von IDS zur Erkennung verdächtiger Netzwerkaktivitäten, die auf einen Ausnutzungsversuch hindeuten könnten.

Lessons Learned: Was wir aus CVE-2010-2628 gelernt haben

CVE-2010-2628 verdeutlichte wichtige Lessons Learned für IT-Sicherheitsprofis:

• Input Validation ist entscheidend: Die Schwachstelle unterstreicht die Bedeutung einer sorgfältigen und umfassenden Validierung von Benutzereingaben in allen Softwarekomponenten.


• Regelmäßige Updates sind unerlässlich: Die schnelle Behebung der Schwachstelle durch ein Software-Update zeigte, wie wichtig es ist, Systeme regelmäßig zu aktualisieren, um Sicherheitslücken zu schließen.


• Sicherheitsbewusstsein und Risikomanagement: Die Schwachstelle verdeutlichte die Notwendigkeit eines kontinuierlichen Sicherheitsbewusstseins und eines effektiven Risikomanagements in Unternehmen.


• Open-Source-Software benötigt Aufmerksamkeit: Obwohl Open-Source-Software viele Vorteile bietet, ist es wichtig, auch auf ihre Sicherheit zu achten und regelmäßig Updates zu prüfen und anzuwenden.


• Vertiefte Kenntnisse von Protokollen: Das Verständnis der Funktionsweise von Protokollen wie IKE/IPsec ist essentiell für die Entwicklung sicherer Systeme.

Fazit

CVE-2010-2628 war ein ernstes Sicherheitsrisiko, das die Bedeutung von Software-Updates und einer soliden Sicherheitsarchitektur unterstreicht. Obwohl die Schwachstelle inzwischen behoben ist, bleibt sie ein wichtiges Beispiel für die potenziellen Folgen von fehlender Input Validation und die Notwendigkeit eines proaktiven Sicherheitsansatzes in der IT-Landschaft. Die Lehren aus diesem Vorfall sind auch heute noch relevant und sollten in die tägliche Arbeit von IT-Experten einfließen, um die Sicherheit von Netzwerken und Systemen zu gewährleisten.

High Vulnerabilities