summaryrefslogtreecommitdiffstats
path: root/ChangeLog.rss
diff options
context:
space:
mode:
author Patrick J Volkerding <volkerdi@slackware.com>2024-02-09 21:48:09 +0000
committer Eric Hameleers <alien@slackware.com>2024-02-09 23:28:55 +0100
commit86d36ef502a1bc2a11e0535eeb115e761d9f3515 (patch)
treecab2c7e3433bc5e6cc20ebd8354af43455b6a076 /ChangeLog.rss
parent75fbe2b8aac2aab05665c458fe744855f4e55533 (diff)
downloadcurrent-86d36ef502a1bc2a11e0535eeb115e761d9f3515.tar.gz
current-86d36ef502a1bc2a11e0535eeb115e761d9f3515.tar.xz
Fri Feb 9 21:48:09 UTC 202420240209214809
l/libhandy-1.8.3-x86_64-1.txz: Upgraded. xap/xpdf-4.05-x86_64-1.txz: Upgraded. This update fixes security issues: Fixed a bug in the ICCBased color space parser that was allowing the number of components to be zero. Thanks to huckleberry for the bug report. Fixed a bug in the ICCBased color space parser that was allowing the number of components to be zero. Thanks to huckleberry for the bug report. Added checks for PDF object loops in AcroForm::scanField(), Catalog::readPageLabelTree2(), and Catalog::readEmbeddedFileTree(). The zero-width character problem can also happen if the page size is very large -- that needs to be limited too, the same way as character position coordinates. Thanks to jlinliu for the bug report. Add some missing bounds check code in DCTStream. Thanks to Jiahao Liu for the bug report. Fix a deadlock when an object stream's length field is contained in another object stream. Thanks to Jiahao Liu for the bug report. For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-2662 https://www.cve.org/CVERecord?id=CVE-2023-2662 https://www.cve.org/CVERecord?id=CVE-2018-7453 https://www.cve.org/CVERecord?id=CVE-2018-16369 https://www.cve.org/CVERecord?id=CVE-2022-36561 https://www.cve.org/CVERecord?id=CVE-2022-41844 https://www.cve.org/CVERecord?id=CVE-2023-2663 https://www.cve.org/CVERecord?id=CVE-2023-2664 https://www.cve.org/CVERecord?id=CVE-2023-3044 https://www.cve.org/CVERecord?id=CVE-2023-3436 (* Security fix *)
Diffstat (limited to 'ChangeLog.rss')
-rw-r--r--ChangeLog.rss42
1 files changed, 40 insertions, 2 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss
index cdc61b2b7..9e9bf2b0f 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,10 +11,48 @@
<description>Tracking Slackware development in git.</description>
<language>en-us</language>
<id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
- <pubDate>Thu, 8 Feb 2024 22:17:18 GMT</pubDate>
- <lastBuildDate>Thu, 8 Feb 2024 23:47:33 GMT</lastBuildDate>
+ <pubDate>Fri, 9 Feb 2024 21:48:09 GMT</pubDate>
+ <lastBuildDate>Fri, 9 Feb 2024 22:28:49 GMT</lastBuildDate>
<generator>maintain_current_git.sh v 1.17</generator>
<item>
+ <title>Fri, 9 Feb 2024 21:48:09 GMT</title>
+ <pubDate>Fri, 9 Feb 2024 21:48:09 GMT</pubDate>
+ <link>https://git.slackware.nl/current/tag/?h=20240209214809</link>
+ <guid isPermaLink="false">20240209214809</guid>
+ <description>
+ <![CDATA[<pre>
+l/libhandy-1.8.3-x86_64-1.txz: Upgraded.
+xap/xpdf-4.05-x86_64-1.txz: Upgraded.
+ This update fixes security issues:
+ Fixed a bug in the ICCBased color space parser that was allowing the number
+ of components to be zero. Thanks to huckleberry for the bug report.
+ Fixed a bug in the ICCBased color space parser that was allowing the number
+ of components to be zero. Thanks to huckleberry for the bug report.
+ Added checks for PDF object loops in AcroForm::scanField(),
+ Catalog::readPageLabelTree2(), and Catalog::readEmbeddedFileTree().
+ The zero-width character problem can also happen if the page size is very
+ large -- that needs to be limited too, the same way as character position
+ coordinates. Thanks to jlinliu for the bug report.
+ Add some missing bounds check code in DCTStream. Thanks to Jiahao Liu for
+ the bug report.
+ Fix a deadlock when an object stream's length field is contained in another
+ object stream. Thanks to Jiahao Liu for the bug report.
+ For more information, see:
+ https://www.cve.org/CVERecord?id=CVE-2023-2662
+ https://www.cve.org/CVERecord?id=CVE-2023-2662
+ https://www.cve.org/CVERecord?id=CVE-2018-7453
+ https://www.cve.org/CVERecord?id=CVE-2018-16369
+ https://www.cve.org/CVERecord?id=CVE-2022-36561
+ https://www.cve.org/CVERecord?id=CVE-2022-41844
+ https://www.cve.org/CVERecord?id=CVE-2023-2663
+ https://www.cve.org/CVERecord?id=CVE-2023-2664
+ https://www.cve.org/CVERecord?id=CVE-2023-3044
+ https://www.cve.org/CVERecord?id=CVE-2023-3436
+ (* Security fix *)
+ </pre>]]>
+ </description>
+ </item>
+ <item>
<title>Thu, 8 Feb 2024 22:17:18 GMT</title>
<pubDate>Thu, 8 Feb 2024 22:17:18 GMT</pubDate>
<link>https://git.slackware.nl/current/tag/?h=20240208221718</link>