diff options
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index 55e908df3..e7b2ab997 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,34 @@ +Tue Apr 25 21:20:19 UTC 2023 +d/git-2.40.1-x86_64-1.txz: Upgraded. + This update fixes security issues: + By feeding specially crafted input to `git apply --reject`, a + path outside the working tree can be overwritten with partially + controlled contents (corresponding to the rejected hunk(s) from + the given patch). + When Git is compiled with runtime prefix support and runs without + translated messages, it still used the gettext machinery to + display messages, which subsequently potentially looked for + translated messages in unexpected places. This allowed for + malicious placement of crafted messages. + When renaming or deleting a section from a configuration file, + certain malicious configuration values may be misinterpreted as + the beginning of a new configuration section, leading to arbitrary + configuration injection. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-25652 + https://www.cve.org/CVERecord?id=CVE-2023-25815 + https://www.cve.org/CVERecord?id=CVE-2023-29007 + (* Security fix *) +n/snownews-1.11-x86_64-1.txz: Upgraded. +xap/mozilla-firefox-112.0.2-x86_64-1.txz: Upgraded. + This is a bugfix release. + For more information, see: + https://www.mozilla.org/en-US/firefox/112.0.2/releasenotes/ +xap/mozilla-thunderbird-102.10.1-x86_64-1.txz: Upgraded. + This is a bugfix release. + For more information, see: + https://www.mozilla.org/en-US/thunderbird/102.10.1/releasenotes/ ++--------------------------+ Mon Apr 24 22:28:34 UTC 2023 d/parallel-20230422-noarch-1.txz: Upgraded. d/patchelf-0.18.0-x86_64-1.txz: Upgraded. |