diff options
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index b8ef4d856..508238ffb 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,29 @@ +Tue Apr 25 21:20:19 UTC 2023 +patches/packages/git-2.35.8-x86_64-1_slack15.0.txz: Upgraded. + This update fixes security issues: + By feeding specially crafted input to `git apply --reject`, a + path outside the working tree can be overwritten with partially + controlled contents (corresponding to the rejected hunk(s) from + the given patch). + When Git is compiled with runtime prefix support and runs without + translated messages, it still used the gettext machinery to + display messages, which subsequently potentially looked for + translated messages in unexpected places. This allowed for + malicious placement of crafted messages. + When renaming or deleting a section from a configuration file, + certain malicious configuration values may be misinterpreted as + the beginning of a new configuration section, leading to arbitrary + configuration injection. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-25652 + https://www.cve.org/CVERecord?id=CVE-2023-25815 + https://www.cve.org/CVERecord?id=CVE-2023-29007 + (* Security fix *) +patches/packages/mozilla-thunderbird-102.10.1-x86_64-1_slack15.0.txz: Upgraded. + This is a bugfix release. + For more information, see: + https://www.mozilla.org/en-US/thunderbird/102.10.1/releasenotes/ ++--------------------------+ Wed Apr 19 19:17:14 UTC 2023 patches/packages/bind-9.16.40-x86_64-1_slack15.0.txz: Upgraded. This is a bugfix release. |