diff options
Diffstat (limited to '')
| -rw-r--r-- | ChangeLog.txt | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index 61c6d011c..864f6713b 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,34 @@ +Wed Mar 27 19:16:09 UTC 2024 +a/kernel-firmware-20240322_e068ccf-noarch-1.txz: Upgraded. +a/kernel-generic-6.6.23-x86_64-1.txz: Upgraded. +a/kernel-huge-6.6.23-x86_64-1.txz: Upgraded. +a/kernel-modules-6.6.23-x86_64-1.txz: Upgraded. +d/kernel-headers-6.6.23-x86-1.txz: Upgraded. +k/kernel-source-6.6.23-noarch-1.txz: Upgraded. +l/nodejs-20.12.0-x86_64-1.txz: Upgraded. +l/openexr-3.2.4-x86_64-1.txz: Upgraded. +l/zstd-1.5.6-x86_64-1.txz: Upgraded. +n/curl-8.7.1-x86_64-1.txz: Upgraded. + This release fixes the following security issues: + TLS certificate check bypass with mbedTLS. + HTTP/2 push headers memory-leak. + QUIC certificate check bypass with wolfSSL. + Usage of disabled protocol. + For more information, see: + https://curl.se/docs/CVE-2024-2466.html + https://curl.se/docs/CVE-2024-2398.html + https://curl.se/docs/CVE-2024-2379.html + https://curl.se/docs/CVE-2024-2004.html + https://www.cve.org/CVERecord?id=CVE-2024-2466 + https://www.cve.org/CVERecord?id=CVE-2024-2398 + https://www.cve.org/CVERecord?id=CVE-2024-2379 + https://www.cve.org/CVERecord?id=CVE-2024-2004 + (* Security fix *) +x/xorgproto-2024.1-x86_64-1.txz: Upgraded. +isolinux/initrd.img: Rebuilt. +kernels/*: Upgraded. +usb-and-pxe-installers/usbboot.img: Rebuilt. ++--------------------------+ Tue Mar 26 22:24:59 UTC 2024 l/gjs-1.80.2-x86_64-1.txz: Upgraded. l/qt6-6.6.3_20240319_c2516323-x86_64-1.txz: Upgraded. |