diff options
| author | Patrick J Volkerding <volkerdi@slackware.com> | 2021-12-29 02:42:32 +0000 |
|---|---|---|
| committer | Eric Hameleers <alien@slackware.com> | 2021-12-29 08:59:55 +0100 |
| commit | 58eb3d5294fad71e08ea24b683dea0905c86c827 (patch) | |
| tree | d00c7a42e4cbf0cdbaee9ea00edc5855a4174e0c /CHANGES_AND_HINTS.TXT | |
| parent | ac00706594d04f1b74af59b2437af2165087610b (diff) | |
| download | current-20211229024232.tar.gz | |
Wed Dec 29 02:42:32 UTC 202120211229024232
l/libgsf-1.14.48-x86_64-1.txz: Upgraded.
l/netpbm-10.97.00-x86_64-1.txz: Upgraded.
n/wpa_supplicant-2.9-x86_64-8.txz: Rebuilt.
This update fixes the following security issues:
AP mode PMF disconnection protection bypass.
UPnP SUBSCRIBE misbehavior in hostapd WPS AP.
P2P group information processing vulnerability.
P2P provision discovery processing vulnerability.
ASN.1: Validate DigestAlgorithmIdentifier parameters.
Flush pending control interface message for an interface to be removed.
These issues could result in a denial-of-service, privilege escalation,
arbitrary code execution, or other unexpected behavior.
Thanks to nobodino for pointing out the patches.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0535
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27803
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30004
(* Security fix *)
xap/seamonkey-2.53.10.2-x86_64-1.txz: Upgraded.
This update contains security fixes and improvements.
For more information, see:
https://www.seamonkey-project.org/releases/seamonkey2.53.10.2
(* Security fix *)
Diffstat (limited to 'CHANGES_AND_HINTS.TXT')
0 files changed, 0 insertions, 0 deletions