diff options
| author | Patrick J Volkerding <volkerdi@slackware.com> | 2022-06-23 05:30:51 +0000 |
|---|---|---|
| committer | Eric Hameleers <alien@slackware.com> | 2022-06-23 17:00:11 +0200 |
| commit | ab672bcf47dca57cfce72407176dd6460c3397b7 (patch) | |
| tree | ae9ba59e4c424fff0056ffcc9d0ad4e06f877828 /ChangeLog.rss | |
| parent | 331d37cb9ea7e47a0b93f49e6d02d58b1d78a9e8 (diff) | |
| download | current-ab672bcf47dca57cfce72407176dd6460c3397b7.tar.gz | |
Thu Jun 23 05:30:51 UTC 202220220623053051
a/kernel-generic-5.18.6-x86_64-1.txz: Upgraded.
a/kernel-huge-5.18.6-x86_64-1.txz: Upgraded.
a/kernel-modules-5.18.6-x86_64-1.txz: Upgraded.
a/openssl-solibs-1.1.1p-x86_64-1.txz: Upgraded.
ap/sudo-1.9.11p3-x86_64-1.txz: Upgraded.
d/kernel-headers-5.18.6-x86-1.txz: Upgraded.
k/kernel-source-5.18.6-noarch-1.txz: Upgraded.
l/espeak-ng-1.51.1-x86_64-1.txz: Upgraded.
l/libidn-1.40-x86_64-1.txz: Upgraded.
l/mlt-7.8.0-x86_64-1.txz: Upgraded.
l/openal-soft-1.22.1-x86_64-1.txz: Upgraded.
l/pulseaudio-16.1-x86_64-1.txz: Upgraded.
l/speex-1.2.1-x86_64-1.txz: Upgraded.
l/speexdsp-1.2.1-x86_64-1.txz: Upgraded.
n/ca-certificates-20220622-noarch-1.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
n/openssl-1.1.1p-x86_64-1.txz: Upgraded.
In addition to the c_rehash shell command injection identified in
CVE-2022-1292, further circumstances where the c_rehash script does not
properly sanitise shell metacharacters to prevent command injection were
found by code review.
When the CVE-2022-1292 was fixed it was not discovered that there
are other places in the script where the file names of certificates
being hashed were possibly passed to a command executed through the shell.
For more information, see:
https://www.openssl.org/news/secadv/20220621.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
(* Security fix *)
x/ibus-table-1.16.9-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
Diffstat (limited to 'ChangeLog.rss')
| -rw-r--r-- | ChangeLog.rss | 47 |
1 files changed, 45 insertions, 2 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss index c8c1985c..93cfd3e2 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,10 +11,53 @@ <description>Tracking Slackware development in git.</description> <language>en-us</language> <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id> - <pubDate>Tue, 21 Jun 2022 19:49:31 GMT</pubDate> - <lastBuildDate>Wed, 22 Jun 2022 05:00:14 GMT</lastBuildDate> + <pubDate>Thu, 23 Jun 2022 05:30:51 GMT</pubDate> + <lastBuildDate>Thu, 23 Jun 2022 15:00:10 GMT</lastBuildDate> <generator>maintain_current_git.sh v 1.17</generator> <item> + <title>Thu, 23 Jun 2022 05:30:51 GMT</title> + <pubDate>Thu, 23 Jun 2022 05:30:51 GMT</pubDate> + <link>https://git.slackware.nl/current/tag/?h=20220623053051</link> + <guid isPermaLink="false">20220623053051</guid> + <description> + <![CDATA[<pre> +a/kernel-generic-5.18.6-x86_64-1.txz: Upgraded. +a/kernel-huge-5.18.6-x86_64-1.txz: Upgraded. +a/kernel-modules-5.18.6-x86_64-1.txz: Upgraded. +a/openssl-solibs-1.1.1p-x86_64-1.txz: Upgraded. +ap/sudo-1.9.11p3-x86_64-1.txz: Upgraded. +d/kernel-headers-5.18.6-x86-1.txz: Upgraded. +k/kernel-source-5.18.6-noarch-1.txz: Upgraded. +l/espeak-ng-1.51.1-x86_64-1.txz: Upgraded. +l/libidn-1.40-x86_64-1.txz: Upgraded. +l/mlt-7.8.0-x86_64-1.txz: Upgraded. +l/openal-soft-1.22.1-x86_64-1.txz: Upgraded. +l/pulseaudio-16.1-x86_64-1.txz: Upgraded. +l/speex-1.2.1-x86_64-1.txz: Upgraded. +l/speexdsp-1.2.1-x86_64-1.txz: Upgraded. +n/ca-certificates-20220622-noarch-1.txz: Upgraded. + This update provides the latest CA certificates to check for the + authenticity of SSL connections. +n/openssl-1.1.1p-x86_64-1.txz: Upgraded. + In addition to the c_rehash shell command injection identified in + CVE-2022-1292, further circumstances where the c_rehash script does not + properly sanitise shell metacharacters to prevent command injection were + found by code review. + When the CVE-2022-1292 was fixed it was not discovered that there + are other places in the script where the file names of certificates + being hashed were possibly passed to a command executed through the shell. + For more information, see: + https://www.openssl.org/news/secadv/20220621.txt + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068 + (* Security fix *) +x/ibus-table-1.16.9-x86_64-1.txz: Upgraded. +isolinux/initrd.img: Rebuilt. +kernels/*: Upgraded. +usb-and-pxe-installers/usbboot.img: Rebuilt. + </pre>]]> + </description> + </item> + <item> <title>Tue, 21 Jun 2022 19:49:31 GMT</title> <pubDate>Tue, 21 Jun 2022 19:49:31 GMT</pubDate> <link>https://git.slackware.nl/current/tag/?h=20220621194931</link> |