diff options
author | Patrick J Volkerding <volkerdi@slackware.com> | 2024-03-27 19:16:09 +0000 |
---|---|---|
committer | Eric Hameleers <alien@slackware.com> | 2024-03-27 21:24:52 +0100 |
commit | 0566738f32381ee1eb6c24ecd47f690423c49009 (patch) | |
tree | df58d47417bbecbf72e5a9e2b1ac53828fd73c37 /ChangeLog.txt | |
parent | b5abc7571b6402a0fbfb487f05e385387d3664e3 (diff) | |
download | current-0566738f32381ee1eb6c24ecd47f690423c49009.tar.gz current-0566738f32381ee1eb6c24ecd47f690423c49009.tar.xz |
Wed Mar 27 19:16:09 UTC 202420240327191609
a/kernel-firmware-20240322_e068ccf-noarch-1.txz: Upgraded.
a/kernel-generic-6.6.23-x86_64-1.txz: Upgraded.
a/kernel-huge-6.6.23-x86_64-1.txz: Upgraded.
a/kernel-modules-6.6.23-x86_64-1.txz: Upgraded.
d/kernel-headers-6.6.23-x86-1.txz: Upgraded.
k/kernel-source-6.6.23-noarch-1.txz: Upgraded.
l/nodejs-20.12.0-x86_64-1.txz: Upgraded.
l/openexr-3.2.4-x86_64-1.txz: Upgraded.
l/zstd-1.5.6-x86_64-1.txz: Upgraded.
n/curl-8.7.1-x86_64-1.txz: Upgraded.
This release fixes the following security issues:
TLS certificate check bypass with mbedTLS.
HTTP/2 push headers memory-leak.
QUIC certificate check bypass with wolfSSL.
Usage of disabled protocol.
For more information, see:
https://curl.se/docs/CVE-2024-2466.html
https://curl.se/docs/CVE-2024-2398.html
https://curl.se/docs/CVE-2024-2379.html
https://curl.se/docs/CVE-2024-2004.html
https://www.cve.org/CVERecord?id=CVE-2024-2466
https://www.cve.org/CVERecord?id=CVE-2024-2398
https://www.cve.org/CVERecord?id=CVE-2024-2379
https://www.cve.org/CVERecord?id=CVE-2024-2004
(* Security fix *)
x/xorgproto-2024.1-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Diffstat (limited to 'ChangeLog.txt')
-rw-r--r-- | ChangeLog.txt | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index 61c6d011c..864f6713b 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,34 @@ +Wed Mar 27 19:16:09 UTC 2024 +a/kernel-firmware-20240322_e068ccf-noarch-1.txz: Upgraded. +a/kernel-generic-6.6.23-x86_64-1.txz: Upgraded. +a/kernel-huge-6.6.23-x86_64-1.txz: Upgraded. +a/kernel-modules-6.6.23-x86_64-1.txz: Upgraded. +d/kernel-headers-6.6.23-x86-1.txz: Upgraded. +k/kernel-source-6.6.23-noarch-1.txz: Upgraded. +l/nodejs-20.12.0-x86_64-1.txz: Upgraded. +l/openexr-3.2.4-x86_64-1.txz: Upgraded. +l/zstd-1.5.6-x86_64-1.txz: Upgraded. +n/curl-8.7.1-x86_64-1.txz: Upgraded. + This release fixes the following security issues: + TLS certificate check bypass with mbedTLS. + HTTP/2 push headers memory-leak. + QUIC certificate check bypass with wolfSSL. + Usage of disabled protocol. + For more information, see: + https://curl.se/docs/CVE-2024-2466.html + https://curl.se/docs/CVE-2024-2398.html + https://curl.se/docs/CVE-2024-2379.html + https://curl.se/docs/CVE-2024-2004.html + https://www.cve.org/CVERecord?id=CVE-2024-2466 + https://www.cve.org/CVERecord?id=CVE-2024-2398 + https://www.cve.org/CVERecord?id=CVE-2024-2379 + https://www.cve.org/CVERecord?id=CVE-2024-2004 + (* Security fix *) +x/xorgproto-2024.1-x86_64-1.txz: Upgraded. +isolinux/initrd.img: Rebuilt. +kernels/*: Upgraded. +usb-and-pxe-installers/usbboot.img: Rebuilt. ++--------------------------+ Tue Mar 26 22:24:59 UTC 2024 l/gjs-1.80.2-x86_64-1.txz: Upgraded. l/qt6-6.6.3_20240319_c2516323-x86_64-1.txz: Upgraded. |