summaryrefslogtreecommitdiffstats
path: root/ChangeLog.rss
diff options
context:
space:
mode:
Diffstat (limited to 'ChangeLog.rss')
-rw-r--r--ChangeLog.rss47
1 files changed, 45 insertions, 2 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss
index c8c1985c6..93cfd3e2e 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,10 +11,53 @@
<description>Tracking Slackware development in git.</description>
<language>en-us</language>
<id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
- <pubDate>Tue, 21 Jun 2022 19:49:31 GMT</pubDate>
- <lastBuildDate>Wed, 22 Jun 2022 05:00:14 GMT</lastBuildDate>
+ <pubDate>Thu, 23 Jun 2022 05:30:51 GMT</pubDate>
+ <lastBuildDate>Thu, 23 Jun 2022 15:00:10 GMT</lastBuildDate>
<generator>maintain_current_git.sh v 1.17</generator>
<item>
+ <title>Thu, 23 Jun 2022 05:30:51 GMT</title>
+ <pubDate>Thu, 23 Jun 2022 05:30:51 GMT</pubDate>
+ <link>https://git.slackware.nl/current/tag/?h=20220623053051</link>
+ <guid isPermaLink="false">20220623053051</guid>
+ <description>
+ <![CDATA[<pre>
+a/kernel-generic-5.18.6-x86_64-1.txz: Upgraded.
+a/kernel-huge-5.18.6-x86_64-1.txz: Upgraded.
+a/kernel-modules-5.18.6-x86_64-1.txz: Upgraded.
+a/openssl-solibs-1.1.1p-x86_64-1.txz: Upgraded.
+ap/sudo-1.9.11p3-x86_64-1.txz: Upgraded.
+d/kernel-headers-5.18.6-x86-1.txz: Upgraded.
+k/kernel-source-5.18.6-noarch-1.txz: Upgraded.
+l/espeak-ng-1.51.1-x86_64-1.txz: Upgraded.
+l/libidn-1.40-x86_64-1.txz: Upgraded.
+l/mlt-7.8.0-x86_64-1.txz: Upgraded.
+l/openal-soft-1.22.1-x86_64-1.txz: Upgraded.
+l/pulseaudio-16.1-x86_64-1.txz: Upgraded.
+l/speex-1.2.1-x86_64-1.txz: Upgraded.
+l/speexdsp-1.2.1-x86_64-1.txz: Upgraded.
+n/ca-certificates-20220622-noarch-1.txz: Upgraded.
+ This update provides the latest CA certificates to check for the
+ authenticity of SSL connections.
+n/openssl-1.1.1p-x86_64-1.txz: Upgraded.
+ In addition to the c_rehash shell command injection identified in
+ CVE-2022-1292, further circumstances where the c_rehash script does not
+ properly sanitise shell metacharacters to prevent command injection were
+ found by code review.
+ When the CVE-2022-1292 was fixed it was not discovered that there
+ are other places in the script where the file names of certificates
+ being hashed were possibly passed to a command executed through the shell.
+ For more information, see:
+ https://www.openssl.org/news/secadv/20220621.txt
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
+ (* Security fix *)
+x/ibus-table-1.16.9-x86_64-1.txz: Upgraded.
+isolinux/initrd.img: Rebuilt.
+kernels/*: Upgraded.
+usb-and-pxe-installers/usbboot.img: Rebuilt.
+ </pre>]]>
+ </description>
+ </item>
+ <item>
<title>Tue, 21 Jun 2022 19:49:31 GMT</title>
<pubDate>Tue, 21 Jun 2022 19:49:31 GMT</pubDate>
<link>https://git.slackware.nl/current/tag/?h=20220621194931</link>