diff options
author | Patrick J Volkerding <volkerdi@slackware.com> | 2023-07-24 22:07:56 +0000 |
---|---|---|
committer | Eric Hameleers <alien@slackware.com> | 2023-07-25 13:30:36 +0200 |
commit | 0ac01cde033f305e11c290cbd5db0f7b80b75da9 (patch) | |
tree | c5808ebf50aa44108aa3ec9c999454e56d2cffbe | |
parent | 7dde293aa0b2d58d9f1eee9d1fadc6ce2224f9db (diff) | |
download | current-0ac01cde033f305e11c290cbd5db0f7b80b75da9.tar.gz current-0ac01cde033f305e11c290cbd5db0f7b80b75da9.tar.xz |
Mon Jul 24 22:07:56 UTC 202320230724220756_15.0
patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txz: Upgraded.
AMD microcode updated to fix a use-after-free in AMD Zen2 processors.
From Tavis Ormandy's annoucement of the issue:
"The practical result here is that you can spy on the registers of other
processes. No system calls or privileges are required.
It works across virtual machines and affects all operating systems.
I have written a poc for this issue that's fast enough to reconstruct
keys and passwords as users log in."
For more information, see:
https://seclists.org/oss-sec/2023/q3/59
https://www.cve.org/CVERecord?id=CVE-2023-20593
(* Security fix *)
-rw-r--r-- | ChangeLog.rss | 26 | ||||
-rw-r--r-- | ChangeLog.txt | 14 | ||||
-rw-r--r-- | FILELIST.TXT | 32 | ||||
-rw-r--r-- | patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txt (renamed from patches/packages/kernel-firmware-20230620_045b213-noarch-1.txt) | 0 |
4 files changed, 54 insertions, 18 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss index 0956ea022..39cf32eee 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,10 +11,32 @@ <description>Tracking Slackware development in git.</description> <language>en-us</language> <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id> - <pubDate>Mon, 24 Jul 2023 00:17:18 GMT</pubDate> - <lastBuildDate>Mon, 24 Jul 2023 11:30:21 GMT</lastBuildDate> + <pubDate>Mon, 24 Jul 2023 22:07:56 GMT</pubDate> + <lastBuildDate>Tue, 25 Jul 2023 11:30:23 GMT</lastBuildDate> <generator>maintain_current_git.sh v 1.17</generator> <item> + <title>Mon, 24 Jul 2023 22:07:56 GMT</title> + <pubDate>Mon, 24 Jul 2023 22:07:56 GMT</pubDate> + <link>https://git.slackware.nl/current/tag/?h=20230724220756</link> + <guid isPermaLink="false">20230724220756</guid> + <description> + <![CDATA[<pre> +patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txz: Upgraded. + AMD microcode updated to fix a use-after-free in AMD Zen2 processors. + From Tavis Ormandy's annoucement of the issue: + "The practical result here is that you can spy on the registers of other + processes. No system calls or privileges are required. + It works across virtual machines and affects all operating systems. + I have written a poc for this issue that's fast enough to reconstruct + keys and passwords as users log in." + For more information, see: + https://seclists.org/oss-sec/2023/q3/59 + https://www.cve.org/CVERecord?id=CVE-2023-20593 + (* Security fix *) + </pre>]]> + </description> + </item> + <item> <title>Mon, 24 Jul 2023 00:17:18 GMT</title> <pubDate>Mon, 24 Jul 2023 00:17:18 GMT</pubDate> <link>https://git.slackware.nl/current/tag/?h=20230724001718</link> diff --git a/ChangeLog.txt b/ChangeLog.txt index 70e66e53c..e5a1803c3 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,17 @@ +Mon Jul 24 22:07:56 UTC 2023 +patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txz: Upgraded. + AMD microcode updated to fix a use-after-free in AMD Zen2 processors. + From Tavis Ormandy's annoucement of the issue: + "The practical result here is that you can spy on the registers of other + processes. No system calls or privileges are required. + It works across virtual machines and affects all operating systems. + I have written a poc for this issue that's fast enough to reconstruct + keys and passwords as users log in." + For more information, see: + https://seclists.org/oss-sec/2023/q3/59 + https://www.cve.org/CVERecord?id=CVE-2023-20593 + (* Security fix *) ++--------------------------+ Mon Jul 24 00:17:18 UTC 2023 patches/packages/whois-5.5.18-x86_64-1_slack15.0.txz: Upgraded. Updated the .ga TLD server. diff --git a/FILELIST.TXT b/FILELIST.TXT index 4c92d6334..616ae6609 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Mon Jul 24 00:22:55 UTC 2023 +Mon Jul 24 22:12:56 UTC 2023 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2023-07-24 00:17 . +drwxr-xr-x 12 root root 4096 2023-07-24 22:07 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1186350 2023-07-21 19:41 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2023-07-21 19:41 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1186350 2023-07-24 00:23 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-07-24 00:23 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 2028961 2023-07-24 00:17 ./ChangeLog.txt +-rw-r--r-- 1 root root 2029684 2023-07-24 22:07 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1550666 2023-07-21 19:41 ./FILELIST.TXT +-rw-r--r-- 1 root root 1550666 2023-07-24 00:22 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY -rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT @@ -737,13 +737,13 @@ drwxr-xr-x 2 root root 4096 2008-05-07 05:21 ./pasture/source/php/pear -rwxr-xr-x 1 root root 9448 2018-05-16 22:38 ./pasture/source/php/php.SlackBuild -rw-r--r-- 1 root root 775 2017-07-07 19:25 ./pasture/source/php/php.ini-development.diff.gz -rw-r--r-- 1 root root 830 2005-12-09 05:18 ./pasture/source/php/slack-desc -drwxr-xr-x 4 root root 4096 2023-07-24 00:22 ./patches --rw-r--r-- 1 root root 79302 2023-07-24 00:22 ./patches/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2023-07-24 00:22 ./patches/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 107835 2023-07-24 00:22 ./patches/FILE_LIST --rw-r--r-- 1 root root 12622307 2023-07-24 00:22 ./patches/MANIFEST.bz2 --rw-r--r-- 1 root root 56668 2023-07-24 00:22 ./patches/PACKAGES.TXT -drwxr-xr-x 3 root root 20480 2023-07-24 00:22 ./patches/packages +drwxr-xr-x 4 root root 4096 2023-07-24 22:12 ./patches +-rw-r--r-- 1 root root 79302 2023-07-24 22:12 ./patches/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2023-07-24 22:12 ./patches/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 107835 2023-07-24 22:12 ./patches/FILE_LIST +-rw-r--r-- 1 root root 12621820 2023-07-24 22:12 ./patches/MANIFEST.bz2 +-rw-r--r-- 1 root root 56668 2023-07-24 22:12 ./patches/PACKAGES.TXT +drwxr-xr-x 3 root root 20480 2023-07-24 22:12 ./patches/packages -rw-r--r-- 1 root root 327 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt -rw-r--r-- 1 root root 10716 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz -rw-r--r-- 1 root root 163 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz.asc @@ -828,9 +828,9 @@ drwxr-xr-x 3 root root 20480 2023-07-24 00:22 ./patches/packages -rw-r--r-- 1 root root 331 2023-04-02 18:21 ./patches/packages/irssi-1.4.4-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 683420 2023-04-02 18:21 ./patches/packages/irssi-1.4.4-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2023-04-02 18:21 ./patches/packages/irssi-1.4.4-x86_64-1_slack15.0.txz.asc --rw-r--r-- 1 root root 422 2023-06-21 17:18 ./patches/packages/kernel-firmware-20230620_045b213-noarch-1.txt --rw-r--r-- 1 root root 256699392 2023-06-21 17:18 ./patches/packages/kernel-firmware-20230620_045b213-noarch-1.txz --rw-r--r-- 1 root root 163 2023-06-21 17:18 ./patches/packages/kernel-firmware-20230620_045b213-noarch-1.txz.asc +-rw-r--r-- 1 root root 422 2023-07-24 20:00 ./patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txt +-rw-r--r-- 1 root root 256341700 2023-07-24 20:00 ./patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txz +-rw-r--r-- 1 root root 163 2023-07-24 20:00 ./patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txz.asc -rw-r--r-- 1 root root 304 2023-07-12 20:40 ./patches/packages/krb5-1.19.2-x86_64-4_slack15.0.txt -rw-r--r-- 1 root root 1210692 2023-07-12 20:40 ./patches/packages/krb5-1.19.2-x86_64-4_slack15.0.txz -rw-r--r-- 1 root root 163 2023-07-12 20:40 ./patches/packages/krb5-1.19.2-x86_64-4_slack15.0.txz.asc diff --git a/patches/packages/kernel-firmware-20230620_045b213-noarch-1.txt b/patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txt index 4b07a89f4..4b07a89f4 100644 --- a/patches/packages/kernel-firmware-20230620_045b213-noarch-1.txt +++ b/patches/packages/kernel-firmware-20230724_59fbffa-noarch-1.txt |