From 32316b07e4f42c70fc8ebd630320ae111e228952 Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Wed, 29 Mar 2023 20:56:21 +0000 Subject: Wed Mar 29 20:56:21 UTC 2023 a/glibc-zoneinfo-2023c-noarch-1.txz: Upgraded. This package provides the latest timezone updates. ap/inxi-3.3.26_1-noarch-1.txz: Upgraded. d/rust-1.67.1-x86_64-3.txz: Rebuilt. Use the bundled LLVM rather than the system LLVM. x/xorg-server-21.1.8-x86_64-1.txz: Upgraded. [PATCH] composite: Fix use-after-free of the COW. Fix use-after-free that can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. For more information, see: https://lists.x.org/archives/xorg-announce/2023-March/003374.html https://www.cve.org/CVERecord?id=CVE-2023-1393 (* Security fix *) x/xorg-server-xephyr-21.1.8-x86_64-1.txz: Upgraded. x/xorg-server-xnest-21.1.8-x86_64-1.txz: Upgraded. x/xorg-server-xvfb-21.1.8-x86_64-1.txz: Upgraded. x/xorg-server-xwayland-23.1.1-x86_64-1.txz: Upgraded. [PATCH] composite: Fix use-after-free of the COW. Fix use-after-free that can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. For more information, see: https://lists.x.org/archives/xorg-announce/2023-March/003374.html https://www.cve.org/CVERecord?id=CVE-2023-1393 (* Security fix *) xap/mozilla-thunderbird-102.9.1-x86_64-1.txz: Upgraded. This release contains security fixes and improvements. For more information, see: https://www.mozilla.org/en-US/thunderbird/102.9.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2023-12/ https://www.cve.org/CVERecord?id=CVE-2023-28427 (* Security fix *) xfce/garcon-4.18.1-x86_64-1.txz: Upgraded. xfce/libxfce4ui-4.18.3-x86_64-1.txz: Upgraded. xfce/xfce4-panel-4.18.3-x86_64-1.txz: Upgraded. xfce/xfce4-pulseaudio-plugin-0.4.6-x86_64-1.txz: Upgraded. xfce/xfce4-session-4.18.2-x86_64-1.txz: Upgraded. --- ChangeLog.rss | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 50 insertions(+), 2 deletions(-) (limited to 'ChangeLog.rss') diff --git a/ChangeLog.rss b/ChangeLog.rss index 7d6f81a7a..e3ed268ef 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,57 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Tue, 28 Mar 2023 19:36:46 GMT - Tue, 28 Mar 2023 20:32:58 GMT + Wed, 29 Mar 2023 20:56:21 GMT + Wed, 29 Mar 2023 21:49:02 GMT maintain_current_git.sh v 1.17 + + Wed, 29 Mar 2023 20:56:21 GMT + Wed, 29 Mar 2023 20:56:21 GMT + https://git.slackware.nl/current/tag/?h=20230329205621 + 20230329205621 + + +a/glibc-zoneinfo-2023c-noarch-1.txz: Upgraded. + This package provides the latest timezone updates. +ap/inxi-3.3.26_1-noarch-1.txz: Upgraded. +d/rust-1.67.1-x86_64-3.txz: Rebuilt. + Use the bundled LLVM rather than the system LLVM. +x/xorg-server-21.1.8-x86_64-1.txz: Upgraded. + [PATCH] composite: Fix use-after-free of the COW. + Fix use-after-free that can lead to local privileges elevation on systems + where the X server is running privileged and remote code execution for ssh + X forwarding sessions. + For more information, see: + https://lists.x.org/archives/xorg-announce/2023-March/003374.html + https://www.cve.org/CVERecord?id=CVE-2023-1393 + (* Security fix *) +x/xorg-server-xephyr-21.1.8-x86_64-1.txz: Upgraded. +x/xorg-server-xnest-21.1.8-x86_64-1.txz: Upgraded. +x/xorg-server-xvfb-21.1.8-x86_64-1.txz: Upgraded. +x/xorg-server-xwayland-23.1.1-x86_64-1.txz: Upgraded. + [PATCH] composite: Fix use-after-free of the COW. + Fix use-after-free that can lead to local privileges elevation on systems + where the X server is running privileged and remote code execution for ssh + X forwarding sessions. + For more information, see: + https://lists.x.org/archives/xorg-announce/2023-March/003374.html + https://www.cve.org/CVERecord?id=CVE-2023-1393 + (* Security fix *) +xap/mozilla-thunderbird-102.9.1-x86_64-1.txz: Upgraded. + This release contains security fixes and improvements. + For more information, see: + https://www.mozilla.org/en-US/thunderbird/102.9.1/releasenotes/ + https://www.mozilla.org/en-US/security/advisories/mfsa2023-12/ + https://www.cve.org/CVERecord?id=CVE-2023-28427 + (* Security fix *) +xfce/garcon-4.18.1-x86_64-1.txz: Upgraded. +xfce/libxfce4ui-4.18.3-x86_64-1.txz: Upgraded. +xfce/xfce4-panel-4.18.3-x86_64-1.txz: Upgraded. +xfce/xfce4-pulseaudio-plugin-0.4.6-x86_64-1.txz: Upgraded. +xfce/xfce4-session-4.18.2-x86_64-1.txz: Upgraded. + ]]> + + Tue, 28 Mar 2023 19:36:46 GMT Tue, 28 Mar 2023 19:36:46 GMT -- cgit v1.2.3-65-gdbad