diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2024-09-14 18:15:34 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2024-09-15 13:30:43 +0200 |
| commit | 52e9abcddc732da995ea1e762ca28815ae80abe1 (patch) | |
| tree | 9ede0e912c46ef5fe9a7651d480e00a4e98eff5e /source/x/x11/slack-desc/font-misc-misc | |
| parent | ced6fa47abc1e7d9f2d0c523552c3cb61b68a241 (diff) | |
| download | current-52e9abcddc732da995ea1e762ca28815ae80abe1.tar.gz current-52e9abcddc732da995ea1e762ca28815ae80abe1.tar.xz | |
Sat Sep 14 18:15:34 UTC 202420240914181534_15.0
patches/packages/libarchive-3.7.5-x86_64-1_slack15.0.txz: Upgraded.
This update fixes the following security issues:
fix multiple vulnerabilities identified by SAST (#2251, #2256)
cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing (#2258)
lzop: prevent integer overflow (#2174)
rar4: protect copy_from_lzss_window_to_unp() (#2172, CVE-2024-20696)
rar4: fix CVE-2024-26256 (#2269)
rar4: fix OOB in delta and audio filter (#2148, #2149)
rar4: fix out of boundary access with large files (#2179)
rar4: add boundary checks to rgb filter (#2210)
rar4: fix OOB access with unicode filenames (#2203)
rar5: clear 'data ready' cache on window buffer reallocs (#2265)
rpm: calculate huge header sizes correctly (#2158)
unzip: unify EOF handling (#2175)
util: fix out of boundary access in mktemp functions (#2160)
uu: stop processing if lines are too long (#2168)
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-20696
https://www.cve.org/CVERecord?id=CVE-2024-26256
(* Security fix *)
Diffstat (limited to 'source/x/x11/slack-desc/font-misc-misc')
0 files changed, 0 insertions, 0 deletions