diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2022-11-17 01:49:28 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2022-11-17 13:30:31 +0100 |
| commit | 45ec128defe50bcf5f3b67d607a7292fa44e78a2 (patch) | |
| tree | 3257123a5c7e39987e3c836e6ff617e90231b637 /patches/packages | |
| parent | 68513bbb1bc0621018d9cbbe21b6a5c87a7ab2dc (diff) | |
| download | current-45ec128defe50bcf5f3b67d607a7292fa44e78a2.tar.gz current-45ec128defe50bcf5f3b67d607a7292fa44e78a2.tar.xz | |
Thu Nov 17 01:49:28 UTC 202220221117014928_15.0
patches/packages/krb5-1.19.2-x86_64-3_slack15.0.txz: Rebuilt.
Fixed integer overflows in PAC parsing.
Fixed memory leak in OTP kdcpreauth module.
Fixed PKCS11 module path search.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2022-42898
(* Security fix *)
patches/packages/mozilla-firefox-102.5.0esr-x86_64-1_slack15.0.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/firefox/102.5.0/releasenotes/
https://www.mozilla.org/security/advisories/mfsa2022-48/
https://www.cve.org/CVERecord?id=CVE-2022-45403
https://www.cve.org/CVERecord?id=CVE-2022-45404
https://www.cve.org/CVERecord?id=CVE-2022-45405
https://www.cve.org/CVERecord?id=CVE-2022-45406
https://www.cve.org/CVERecord?id=CVE-2022-45408
https://www.cve.org/CVERecord?id=CVE-2022-45409
https://www.cve.org/CVERecord?id=CVE-2022-45410
https://www.cve.org/CVERecord?id=CVE-2022-45411
https://www.cve.org/CVERecord?id=CVE-2022-45412
https://www.cve.org/CVERecord?id=CVE-2022-45416
https://www.cve.org/CVERecord?id=CVE-2022-45418
https://www.cve.org/CVERecord?id=CVE-2022-45420
https://www.cve.org/CVERecord?id=CVE-2022-45421
(* Security fix *)
patches/packages/mozilla-thunderbird-102.5.0-x86_64-1_slack15.0.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/102.5.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/
https://www.cve.org/CVERecord?id=CVE-2022-45403
https://www.cve.org/CVERecord?id=CVE-2022-45404
https://www.cve.org/CVERecord?id=CVE-2022-45405
https://www.cve.org/CVERecord?id=CVE-2022-45406
https://www.cve.org/CVERecord?id=CVE-2022-45408
https://www.cve.org/CVERecord?id=CVE-2022-45409
https://www.cve.org/CVERecord?id=CVE-2022-45410
https://www.cve.org/CVERecord?id=CVE-2022-45411
https://www.cve.org/CVERecord?id=CVE-2022-45412
https://www.cve.org/CVERecord?id=CVE-2022-45416
https://www.cve.org/CVERecord?id=CVE-2022-45418
https://www.cve.org/CVERecord?id=CVE-2022-45420
https://www.cve.org/CVERecord?id=CVE-2022-45421
(* Security fix *)
patches/packages/samba-4.15.12-x86_64-1_slack15.0.txz: Upgraded.
Fixed a security issue where Samba's Kerberos libraries and AD DC failed
to guard against integer overflows when parsing a PAC on a 32-bit system,
which allowed an attacker with a forged PAC to corrupt the heap.
For more information, see:
https://www.samba.org/samba/security/CVE-2022-42898.html
https://www.cve.org/CVERecord?id=CVE-2022-42898
(* Security fix *)
patches/packages/xfce4-settings-4.16.5-x86_64-1_slack15.0.txz: Upgraded.
This update fixes regressions in the previous security fix:
mime-settings: Properly quote command parameters.
Revert "Escape characters which do not belong into an URI/URL (Issue #390)."
Diffstat (limited to 'patches/packages')
| -rw-r--r-- | patches/packages/krb5-1.19.2-x86_64-3_slack15.0.txt | 11 | ||||
| -rw-r--r-- | patches/packages/mozilla-firefox-102.5.0esr-x86_64-1_slack15.0.txt (renamed from patches/packages/mozilla-firefox-102.4.0esr-x86_64-1_slack15.0.txt) | 0 | ||||
| -rw-r--r-- | patches/packages/mozilla-thunderbird-102.5.0-x86_64-1_slack15.0.txt (renamed from patches/packages/mozilla-thunderbird-102.4.2-x86_64-1_slack15.0.txt) | 0 | ||||
| -rw-r--r-- | patches/packages/samba-4.15.12-x86_64-1_slack15.0.txt (renamed from patches/packages/samba-4.15.11-x86_64-1_slack15.0.txt) | 0 | ||||
| -rw-r--r-- | patches/packages/xfce4-settings-4.16.5-x86_64-1_slack15.0.txt (renamed from patches/packages/xfce4-settings-4.16.4-x86_64-1_slack15.0.txt) | 0 |
5 files changed, 11 insertions, 0 deletions
diff --git a/patches/packages/krb5-1.19.2-x86_64-3_slack15.0.txt b/patches/packages/krb5-1.19.2-x86_64-3_slack15.0.txt new file mode 100644 index 000000000..cd70c71bb --- /dev/null +++ b/patches/packages/krb5-1.19.2-x86_64-3_slack15.0.txt @@ -0,0 +1,11 @@ +krb5: krb5 (Network authentication protocol) +krb5: +krb5: Kerberos is a network authentication protocol. It is designed to +krb5: provide strong authentication for client/server applications by using +krb5: secret-key cryptography. +krb5: +krb5: Homepage: http://web.mit.edu/kerberos/ +krb5: +krb5: +krb5: +krb5: diff --git a/patches/packages/mozilla-firefox-102.4.0esr-x86_64-1_slack15.0.txt b/patches/packages/mozilla-firefox-102.5.0esr-x86_64-1_slack15.0.txt index 9d8594319..9d8594319 100644 --- a/patches/packages/mozilla-firefox-102.4.0esr-x86_64-1_slack15.0.txt +++ b/patches/packages/mozilla-firefox-102.5.0esr-x86_64-1_slack15.0.txt diff --git a/patches/packages/mozilla-thunderbird-102.4.2-x86_64-1_slack15.0.txt b/patches/packages/mozilla-thunderbird-102.5.0-x86_64-1_slack15.0.txt index 5acb7b92e..5acb7b92e 100644 --- a/patches/packages/mozilla-thunderbird-102.4.2-x86_64-1_slack15.0.txt +++ b/patches/packages/mozilla-thunderbird-102.5.0-x86_64-1_slack15.0.txt diff --git a/patches/packages/samba-4.15.11-x86_64-1_slack15.0.txt b/patches/packages/samba-4.15.12-x86_64-1_slack15.0.txt index e1800f156..e1800f156 100644 --- a/patches/packages/samba-4.15.11-x86_64-1_slack15.0.txt +++ b/patches/packages/samba-4.15.12-x86_64-1_slack15.0.txt diff --git a/patches/packages/xfce4-settings-4.16.4-x86_64-1_slack15.0.txt b/patches/packages/xfce4-settings-4.16.5-x86_64-1_slack15.0.txt index 84b8cb8eb..84b8cb8eb 100644 --- a/patches/packages/xfce4-settings-4.16.4-x86_64-1_slack15.0.txt +++ b/patches/packages/xfce4-settings-4.16.5-x86_64-1_slack15.0.txt |