diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2023-10-17 19:34:56 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2023-10-17 22:37:03 +0200 |
| commit | b36863e0974e59996232294d71dcb0cc357930b5 (patch) | |
| tree | 0e949404a097b2f84c41a2a1fa5442e22afd3676 /ChangeLog.txt | |
| parent | e3fcfb90760bd2af1d574816766377a9c511df87 (diff) | |
| download | current-b36863e0974e59996232294d71dcb0cc357930b5.tar.gz current-b36863e0974e59996232294d71dcb0cc357930b5.tar.xz | |
Tue Oct 17 19:34:56 UTC 202320231017193456
a/util-linux-2.39.2-x86_64-2.txz: Rebuilt.
Copy /etc/pam.d/login to /etc/pam.d/remote. This is needed for /bin/login's
'-h' option, used (for example) by telnetd. If -h is used without
/etc/pam.d/remote, pam will not be configured properly, and /etc/securetty
will be ignored, possibly allowing root to login from a tty that is not
considered secure. Of course, the usual disclaimers about the security of
telnet/telnetd apply.
Thanks to HytronBG and Petri Kaukasoina.
(* Security fix *)
ap/qpdf-11.6.3-x86_64-1.txz: Upgraded.
d/llvm-17.0.3-x86_64-1.txz: Upgraded.
l/libjpeg-turbo-3.0.1-x86_64-1.txz: Upgraded.
l/tevent-0.16.0-x86_64-1.txz: Upgraded.
n/samba-4.19.2-x86_64-1.txz: Upgraded.
This update fixes bugs and a security issue:
Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2023-5568
(* Security fix *)
x/OpenCC-1.1.7-x86_64-1.txz: Upgraded.
xfce/xfconf-4.18.2-x86_64-1.txz: Upgraded.
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index 8ffc0639e..aaa596418 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,26 @@ +Tue Oct 17 19:34:56 UTC 2023 +a/util-linux-2.39.2-x86_64-2.txz: Rebuilt. + Copy /etc/pam.d/login to /etc/pam.d/remote. This is needed for /bin/login's + '-h' option, used (for example) by telnetd. If -h is used without + /etc/pam.d/remote, pam will not be configured properly, and /etc/securetty + will be ignored, possibly allowing root to login from a tty that is not + considered secure. Of course, the usual disclaimers about the security of + telnet/telnetd apply. + Thanks to HytronBG and Petri Kaukasoina. + (* Security fix *) +ap/qpdf-11.6.3-x86_64-1.txz: Upgraded. +d/llvm-17.0.3-x86_64-1.txz: Upgraded. +l/libjpeg-turbo-3.0.1-x86_64-1.txz: Upgraded. +l/tevent-0.16.0-x86_64-1.txz: Upgraded. +n/samba-4.19.2-x86_64-1.txz: Upgraded. + This update fixes bugs and a security issue: + Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-5568 + (* Security fix *) +x/OpenCC-1.1.7-x86_64-1.txz: Upgraded. +xfce/xfconf-4.18.2-x86_64-1.txz: Upgraded. ++--------------------------+ Mon Oct 16 17:03:35 UTC 2023 a/kernel-firmware-20231013_1be48f8-noarch-1.txz: Upgraded. a/kernel-generic-6.1.58-x86_64-1.txz: Upgraded. |