diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2023-10-22 19:30:42 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2023-10-23 13:30:40 +0200 |
| commit | fabd0327d1c5db5ab1e3b34f03bfd65a7e91c7f6 (patch) | |
| tree | 71bbe0c398455245f56d8f96c19ddbe1417f39c5 /ChangeLog.txt | |
| parent | 6f8267e616b0d23914ca4f900bbcba261281447b (diff) | |
| download | current-fabd0327d1c5db5ab1e3b34f03bfd65a7e91c7f6.tar.gz current-fabd0327d1c5db5ab1e3b34f03bfd65a7e91c7f6.tar.xz | |
Sun Oct 22 19:30:42 UTC 202320231022193042_15.0
patches/packages/LibRaw-0.20.2-x86_64-4_slack15.0.txz: Rebuilt.
This update fixes security issues:
A Buffer Overflow vulnerability was found in LibRaw_buffer_datastream::
gets(char*, int), which could lead to privilege escalation or application
crash.
A heap-buffer-overflow was found in raw2image_ex(int), which may lead to
application crash by maliciously crafted input file.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2021-32142
https://www.cve.org/CVERecord?id=CVE-2023-1729
(* Security fix *)
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index 7d5e2abca..f2d710140 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,16 @@ +Sun Oct 22 19:30:42 UTC 2023 +patches/packages/LibRaw-0.20.2-x86_64-4_slack15.0.txz: Rebuilt. + This update fixes security issues: + A Buffer Overflow vulnerability was found in LibRaw_buffer_datastream:: + gets(char*, int), which could lead to privilege escalation or application + crash. + A heap-buffer-overflow was found in raw2image_ex(int), which may lead to + application crash by maliciously crafted input file. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2021-32142 + https://www.cve.org/CVERecord?id=CVE-2023-1729 + (* Security fix *) ++--------------------------+ Thu Oct 19 19:14:05 UTC 2023 patches/packages/httpd-2.4.58-x86_64-1_slack15.0.txz: Upgraded. This update fixes bugs and security issues: |