Thu Jan 26 00:34:41 UTC 202320230126003441_15.0

patches/packages/bind-9.16.37-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and the following security issues:
  An UPDATE message flood could cause :iscman:`named` to exhaust all
  available memory. This flaw was addressed by adding a new
  :any:`update-quota` option that controls the maximum number of
  outstanding DNS UPDATE messages that :iscman:`named` can hold in a
  queue at any given time (default: 100).
  :iscman:`named` could crash with an assertion failure when an RRSIG
  query was received and :any:`stale-answer-client-timeout` was set to a
  non-zero value. This has been fixed.
  :iscman:`named` running as a resolver with the
  :any:`stale-answer-client-timeout` option set to any value greater
  than ``0`` could crash with an assertion failure, when the
  :any:`recursive-clients` soft quota was reached. This has been fixed.
  For more information, see:
    https://kb.isc.org/docs/cve-2022-3094
    https://kb.isc.org/docs/cve-2022-3736
    https://kb.isc.org/docs/cve-2022-3924
    https://www.cve.org/CVERecord?id=CVE-2022-3094
    https://www.cve.org/CVERecord?id=CVE-2022-3736
    https://www.cve.org/CVERecord?id=CVE-2022-3924
  (* Security fix *)
patches/packages/vim-9.0.1241-x86_64-1_slack15.0.txz:  Upgraded.
  Fixed a security issue:
  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
  Thanks to marav for the heads-up.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2023-0433
  (* Security fix *)
patches/packages/vim-gvim-9.0.1241-x86_64-1_slack15.0.txz:  Upgraded.
testing/packages/bind-9.18.11-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes bugs and the following security issues:
  An UPDATE message flood could cause :iscman:`named` to exhaust all
  available memory. This flaw was addressed by adding a new
  :any:`update-quota` option that controls the maximum number of
  outstanding DNS UPDATE messages that :iscman:`named` can hold in a
  queue at any given time (default: 100).
  :iscman:`named` could crash with an assertion failure when an RRSIG
  query was received and :any:`stale-answer-client-timeout` was set to a
  non-zero value. This has been fixed.
  :iscman:`named` running as a resolver with the
  :any:`stale-answer-client-timeout` option set to any value greater
  than ``0`` could crash with an assertion failure, when the
  :any:`recursive-clients` soft quota was reached. This has been fixed.
  For more information, see:
    https://kb.isc.org/docs/cve-2022-3094
    https://kb.isc.org/docs/cve-2022-3736
    https://kb.isc.org/docs/cve-2022-3924
    https://www.cve.org/CVERecord?id=CVE-2022-3094
    https://www.cve.org/CVERecord?id=CVE-2022-3736
    https://www.cve.org/CVERecord?id=CVE-2022-3924
  (* Security fix *)

1 files changed, 64 insertions, 2 deletions

diff --git a/ChangeLog.rss b/ChangeLog.rss
index 8fb1ea859..2f6e66739 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,10 +11,72 @@
       <description>Tracking Slackware development in git.</description>
       <language>en-us</language>
       <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
-      <pubDate>Fri, 20 Jan 2023 23:58:24 GMT</pubDate>
-      <lastBuildDate>Sat, 21 Jan 2023 12:30:17 GMT</lastBuildDate>
+      <pubDate>Thu, 26 Jan 2023 00:34:41 GMT</pubDate>
+      <lastBuildDate>Thu, 26 Jan 2023 12:30:16 GMT</lastBuildDate>
       <generator>maintain_current_git.sh v 1.17</generator>
       <item>
+         <title>Thu, 26 Jan 2023 00:34:41 GMT</title>
+         <pubDate>Thu, 26 Jan 2023 00:34:41 GMT</pubDate>
+         <link>https://git.slackware.nl/current/tag/?h=20230126003441</link>
+         <guid isPermaLink="false">20230126003441</guid>
+         <description>
+           <![CDATA[<pre>
+patches/packages/bind-9.16.37-x86_64-1_slack15.0.txz:  Upgraded.
+  This update fixes bugs and the following security issues:
+  An UPDATE message flood could cause :iscman:`named` to exhaust all
+  available memory. This flaw was addressed by adding a new
+  :any:`update-quota` option that controls the maximum number of
+  outstanding DNS UPDATE messages that :iscman:`named` can hold in a
+  queue at any given time (default: 100).
+  :iscman:`named` could crash with an assertion failure when an RRSIG
+  query was received and :any:`stale-answer-client-timeout` was set to a
+  non-zero value. This has been fixed.
+  :iscman:`named` running as a resolver with the
+  :any:`stale-answer-client-timeout` option set to any value greater
+  than ``0`` could crash with an assertion failure, when the
+  :any:`recursive-clients` soft quota was reached. This has been fixed.
+  For more information, see:
+    https://kb.isc.org/docs/cve-2022-3094
+    https://kb.isc.org/docs/cve-2022-3736
+    https://kb.isc.org/docs/cve-2022-3924
+    https://www.cve.org/CVERecord?id=CVE-2022-3094
+    https://www.cve.org/CVERecord?id=CVE-2022-3736
+    https://www.cve.org/CVERecord?id=CVE-2022-3924
+  (* Security fix *)
+patches/packages/vim-9.0.1241-x86_64-1_slack15.0.txz:  Upgraded.
+  Fixed a security issue:
+  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
+  Thanks to marav for the heads-up.
+  For more information, see:
+    https://www.cve.org/CVERecord?id=CVE-2023-0433
+  (* Security fix *)
+patches/packages/vim-gvim-9.0.1241-x86_64-1_slack15.0.txz:  Upgraded.
+testing/packages/bind-9.18.11-x86_64-1_slack15.0.txz:  Upgraded.
+  This update fixes bugs and the following security issues:
+  An UPDATE message flood could cause :iscman:`named` to exhaust all
+  available memory. This flaw was addressed by adding a new
+  :any:`update-quota` option that controls the maximum number of
+  outstanding DNS UPDATE messages that :iscman:`named` can hold in a
+  queue at any given time (default: 100).
+  :iscman:`named` could crash with an assertion failure when an RRSIG
+  query was received and :any:`stale-answer-client-timeout` was set to a
+  non-zero value. This has been fixed.
+  :iscman:`named` running as a resolver with the
+  :any:`stale-answer-client-timeout` option set to any value greater
+  than ``0`` could crash with an assertion failure, when the
+  :any:`recursive-clients` soft quota was reached. This has been fixed.
+  For more information, see:
+    https://kb.isc.org/docs/cve-2022-3094
+    https://kb.isc.org/docs/cve-2022-3736
+    https://kb.isc.org/docs/cve-2022-3924
+    https://www.cve.org/CVERecord?id=CVE-2022-3094
+    https://www.cve.org/CVERecord?id=CVE-2022-3736
+    https://www.cve.org/CVERecord?id=CVE-2022-3924
+  (* Security fix *)
+           </pre>]]>
+         </description>
+      </item>
+      <item>
          <title>Fri, 20 Jan 2023 23:58:24 GMT</title>
          <pubDate>Fri, 20 Jan 2023 23:58:24 GMT</pubDate>
          <link>https://git.slackware.nl/current/tag/?h=20230120235824</link>