summaryrefslogtreecommitdiffstats
path: root/ChangeLog.txt
diff options
context:
space:
mode:
Diffstat (limited to 'ChangeLog.txt')
-rw-r--r--ChangeLog.txt32
1 files changed, 32 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt
index 5d21f37c2..579097731 100644
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@@ -1,3 +1,35 @@
+Wed Sep 21 19:19:07 UTC 2022
+patches/packages/cups-2.4.2-x86_64-3_slack15.0.txz: Rebuilt.
+ Fixed crash when using the CUPS web setup interface:
+ [PATCH] Fix OpenSSL crash bug - "tls" pointer wasn't cleared after freeing
+ it (Issue #409).
+ Thanks to MisterL, bryjen, and kjhambrick.
+ Fixed an OpenSSL certificate loading issue:
+ [PATCH] The OpenSSL code path wasn't loading the full certificate
+ chain (Issue #465).
+ Thanks to tmmukunn.
++--------------------------+
+Wed Sep 21 18:30:30 UTC 2022
+patches/packages/bind-9.16.33-x86_64-1_slack15.0.txz: Upgraded.
+ This update fixes bugs and the following security issues:
+ Fix memory leak in EdDSA verify processing.
+ Fix memory leak in ECDSA verify processing.
+ Fix serve-stale crash that could happen when stale-answer-client-timeout
+ was set to 0 and there was a stale CNAME in the cache for an incoming query.
+ Prevent excessive resource use while processing large delegations.
+ For more information, see:
+ https://kb.isc.org/docs/cve-2022-38178
+ https://kb.isc.org/docs/cve-2022-38177
+ https://kb.isc.org/docs/cve-2022-3080
+ https://kb.isc.org/docs/cve-2022-2795
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38178
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38177
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3080
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2795
+ (* Security fix *)
+patches/packages/cups-2.4.2-x86_64-2_slack15.0.txz: Rebuilt.
+ Install pkgconfig file to the proper directory.
++--------------------------+
Tue Sep 20 22:50:28 UTC 2022
patches/packages/expat-2.4.9-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue: