14.2 (x86)
Fri Dec 3 20:07:20 UTC 2021
patches/packages/mozilla-nss-3.40.1-i586-2_slack14.2.txz: Rebuilt.
This update fixes a critical security issue:
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are
vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS
signatures. Applications using NSS for handling signatures encoded within
CMS, S/MIME, PKCS #7, or PKCS #12 are likely to be impacted. Applications
using NSS for certificate validation or other TLS, X.509, OCSP or CRL
functionality may be impacted, depending on how they configure NSS.
Note: This vulnerability does NOT impact Mozilla Firefox. However, email
clients and PDF viewers that use NSS for signature verification, such as
Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted.
Thanks to Tavis Ormandy of Google Project Zero.
For more information, see:
https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43527
(* Security fix *)
|
Current (x86)
Sat Dec 4 20:31:55 UTC 2021
a/hwdata-0.354-noarch-1.txz: Upgraded.
a/sysklogd-2.3.0-i586-1.txz: Upgraded.
kde/breeze-icons-5.88.0-noarch-2.txz: Rebuilt.
Applied upstream patch:
[PATCH] Install dark icons via execute_process to use copy command.
Thanks to Heinz Wiesinger.
l/netpbm-10.96.04-i586-1.txz: Upgraded.
l/python-charset-normalizer-2.0.9-i586-1.txz: Upgraded.
|
Current (x86_64)
Sat Dec 4 20:31:55 UTC 2021
a/hwdata-0.354-noarch-1.txz: Upgraded.
a/sysklogd-2.3.0-x86_64-1.txz: Upgraded.
kde/breeze-icons-5.88.0-noarch-2.txz: Rebuilt.
Applied upstream patch:
[PATCH] Install dark icons via execute_process to use copy command.
Thanks to Heinz Wiesinger.
l/netpbm-10.96.04-x86_64-1.txz: Upgraded.
l/python-charset-normalizer-2.0.9-x86_64-1.txz: Upgraded.
|