summaryrefslogtreecommitdiffstats
path: root/ChangeLog.txt
diff options
context:
space:
mode:
author Patrick J Volkerding <volkerdi@slackware.com>2022-05-11 19:01:59 +0000
committer Eric Hameleers <alien@slackware.com>2022-05-12 06:59:53 +0200
commit8aa103090cd9ec2830f977dc4700aa59e8305526 (patch)
tree81129839cf930966e3c957ed3b69c982a0528587 /ChangeLog.txt
parent5ec6fc1f1e98f927ec059ec59639a4cba2efa793 (diff)
downloadcurrent-8aa103090cd9ec2830f977dc4700aa59e8305526.tar.gz
current-8aa103090cd9ec2830f977dc4700aa59e8305526.tar.xz
Wed May 11 19:01:59 UTC 202220220511190159
n/curl-7.83.1-x86_64-1.txz: Upgraded. This update fixes security issues: HSTS bypass via trailing dot. TLS and SSH connection too eager reuse. CERTINFO never-ending busy-loop. percent-encoded path separator in URL host. cookie for trailing dot TLD. curl removes wrong file on error. For more information, see: https://curl.se/docs/CVE-2022-30115.html https://curl.se/docs/CVE-2022-27782.html https://curl.se/docs/CVE-2022-27781.html https://curl.se/docs/CVE-2022-27780.html https://curl.se/docs/CVE-2022-27779.html https://curl.se/docs/CVE-2022-27778.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30115 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27780 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27779 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27778 (* Security fix *) n/epic5-2.1.9-x86_64-1.txz: Upgraded. n/mobile-broadband-provider-info-20220511-x86_64-1.txz: Upgraded.
Diffstat (limited to 'ChangeLog.txt')
-rw-r--r--ChangeLog.txt26
1 files changed, 26 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt
index e3d0e7aac..3b6f9b93a 100644
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@@ -1,3 +1,29 @@
+Wed May 11 19:01:59 UTC 2022
+n/curl-7.83.1-x86_64-1.txz: Upgraded.
+ This update fixes security issues:
+ HSTS bypass via trailing dot.
+ TLS and SSH connection too eager reuse.
+ CERTINFO never-ending busy-loop.
+ percent-encoded path separator in URL host.
+ cookie for trailing dot TLD.
+ curl removes wrong file on error.
+ For more information, see:
+ https://curl.se/docs/CVE-2022-30115.html
+ https://curl.se/docs/CVE-2022-27782.html
+ https://curl.se/docs/CVE-2022-27781.html
+ https://curl.se/docs/CVE-2022-27780.html
+ https://curl.se/docs/CVE-2022-27779.html
+ https://curl.se/docs/CVE-2022-27778.html
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30115
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27780
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27779
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27778
+ (* Security fix *)
+n/epic5-2.1.9-x86_64-1.txz: Upgraded.
+n/mobile-broadband-provider-info-20220511-x86_64-1.txz: Upgraded.
++--------------------------+
Tue May 10 19:36:06 UTC 2022
kde/alkimia-8.1.1-x86_64-1.txz: Upgraded.
kde/kmymoney-5.1.2-x86_64-5.txz: Rebuilt.