summaryrefslogtreecommitdiffstats
path: root/ChangeLog.txt
diff options
context:
space:
mode:
author Patrick J Volkerding <volkerdi@slackware.com>2022-03-09 04:14:08 +0000
committer Eric Hameleers <alien@slackware.com>2022-03-09 19:15:03 +0100
commitead45c4c66632284ed1908267e824ab024f003b1 (patch)
tree932dfda859f2df1d55f676f0c079297999355184 /ChangeLog.txt
parent013aa123f33c828e0014f87895c96f9f048cf0f2 (diff)
downloadcurrent-ead45c4c66632284ed1908267e824ab024f003b1.tar.gz
current-ead45c4c66632284ed1908267e824ab024f003b1.tar.xz
Wed Mar 9 04:14:08 UTC 202220220309041408_15.0
patches/packages/linux-5.15.27/*: Upgraded. These updates fix various bugs and security issues, including the recently announced "Dirty Pipe" vulnerability which allows overwriting data in arbitrary read-only files (CVE-2022-0847). Be sure to upgrade your initrd after upgrading the kernel packages. If you use lilo to boot your machine, be sure lilo.conf points to the correct kernel and initrd and run lilo as root to update the bootloader. If you use elilo to boot your machine, you should run eliloconfig to copy the kernel and initrd to the EFI System Partition. For more information, see: Fixed in 5.15.20: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0492 Fixed in 5.15.23: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0516 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0435 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0487 Fixed in 5.15.24: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25375 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25258 Fixed in 5.15.25: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0847 Fixed in 5.15.26: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25636 (* Security fix *)
Diffstat (limited to 'ChangeLog.txt')
-rw-r--r--ChangeLog.txt26
1 files changed, 26 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt
index f1579ab2e..4c4dbe3b3 100644
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@@ -1,3 +1,29 @@
+Wed Mar 9 04:14:08 UTC 2022
+patches/packages/linux-5.15.27/*: Upgraded.
+ These updates fix various bugs and security issues, including the recently
+ announced "Dirty Pipe" vulnerability which allows overwriting data in
+ arbitrary read-only files (CVE-2022-0847).
+ Be sure to upgrade your initrd after upgrading the kernel packages.
+ If you use lilo to boot your machine, be sure lilo.conf points to the correct
+ kernel and initrd and run lilo as root to update the bootloader.
+ If you use elilo to boot your machine, you should run eliloconfig to copy the
+ kernel and initrd to the EFI System Partition.
+ For more information, see:
+ Fixed in 5.15.20:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0492
+ Fixed in 5.15.23:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0516
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0435
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0487
+ Fixed in 5.15.24:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25375
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25258
+ Fixed in 5.15.25:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0847
+ Fixed in 5.15.26:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25636
+ (* Security fix *)
++--------------------------+
Tue Mar 8 04:39:53 UTC 2022
patches/packages/boost-1.78.0-x86_64-2_slack15.0.txz: Rebuilt.
This update has been patched to fix a regression: