summaryrefslogtreecommitdiffstats
path: root/ChangeLog.txt
diff options
context:
space:
mode:
Diffstat (limited to 'ChangeLog.txt')
-rw-r--r--ChangeLog.txt15
1 files changed, 15 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt
index 2a2888ec4..b7b05e0ed 100644
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@@ -1,3 +1,18 @@
+Fri May 19 18:59:24 UTC 2023
+a/pam-1.5.3-x86_64-1.txz: Upgraded.
+ap/cups-filters-1.28.17-x86_64-2.txz: Rebuilt.
+ [PATCH] Merge pull request from GHSA-gpxc-v2m8-fr3x.
+ With execv() command line arguments are passed as separate strings and
+ not the full command line in a single string. This prevents arbitrary
+ command execution by escaping the quoting of the arguments in a job
+ with forged job title.
+ Thanks to marav.
+ For more information, see:
+ https://www.cve.org/CVERecord?id=CVE-2023-24805
+ (* Security fix *)
+ap/vim-9.0.1569-x86_64-1.txz: Upgraded.
+xap/vim-gvim-9.0.1569-x86_64-1.txz: Upgraded.
++--------------------------+
Fri May 19 16:42:36 UTC 2023
a/exfatprogs-1.2.1-x86_64-1.txz: Upgraded.
d/cmake-3.26.4-x86_64-1.txz: Upgraded.