summaryrefslogtreecommitdiffstats
path: root/ChangeLog.txt
diff options
context:
space:
mode:
Diffstat (limited to 'ChangeLog.txt')
-rw-r--r--ChangeLog.txt22
1 files changed, 22 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt
index 4f2605146..aa5929a77 100644
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@@ -1,3 +1,25 @@
+Mon Jul 24 22:07:56 UTC 2023
+a/kernel-firmware-20230724_59fbffa-noarch-1.txz: Upgraded.
+ AMD microcode updated to fix a use-after-free in AMD Zen2 processors.
+ From Tavis Ormandy's annoucement of the issue:
+ "The practical result here is that you can spy on the registers of other
+ processes. No system calls or privileges are required.
+ It works across virtual machines and affects all operating systems.
+ I have written a poc for this issue that's fast enough to reconstruct
+ keys and passwords as users log in."
+ For more information, see:
+ https://seclists.org/oss-sec/2023/q3/59
+ https://www.cve.org/CVERecord?id=CVE-2023-20593
+ (* Security fix *)
+a/kernel-generic-6.1.41-x86_64-1.txz: Upgraded.
+a/kernel-huge-6.1.41-x86_64-1.txz: Upgraded.
+a/kernel-modules-6.1.41-x86_64-1.txz: Upgraded.
+d/kernel-headers-6.1.41-x86-1.txz: Upgraded.
+k/kernel-source-6.1.41-noarch-1.txz: Upgraded.
+isolinux/initrd.img: Rebuilt.
+kernels/*: Upgraded.
+usb-and-pxe-installers/usbboot.img: Rebuilt.
++--------------------------+
Mon Jul 24 19:26:18 UTC 2023
ap/tmux-3.3a-x86_64-2.txz: Rebuilt.
Patched to fix a crash when copying text. Thanks to nullptr, gnw, and Daedra.