14.2 (x86)
Mon Jun 7 18:53:49 UTC 2021
patches/packages/httpd-2.4.48-i586-1_slack14.2.txz: Upgraded.
This release contains security fixes and improvements.
mod_http2: Fix a potential NULL pointer dereference.
Unexpected section matching with 'MergeSlashes OFF'.
mod_auth_digest: possible stack overflow by one nul byte while validating
the Digest nonce.
mod_session: Fix possible crash due to NULL pointer dereference, which
could be used to cause a Denial of Service with a malicious backend
server and SessionHeader.
mod_session: Fix possible crash due to NULL pointer dereference, which
could be used to cause a Denial of Service.
mod_proxy_http: Fix possible crash due to NULL pointer dereference, which
could be used to cause a Denial of Service.
mod_proxy_wstunnel, mod_proxy_http: Handle Upgradable protocols end-to-end
negotiation.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31618
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30641
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35452
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26691
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26690
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13950
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17567
(* Security fix *)
patches/packages/libX11-1.7.2-i586-1_slack14.2.txz: Upgraded.
This is a bug fix release, correcting a regression introduced by and
improving the checks from the fix for CVE-2021-31535.
patches/packages/polkit-0.113-i586-3_slack14.2.txz: Rebuilt.
This update includes a mitigation for local privilege escalation using
polkit_system_bus_name_get_creds_sync().
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3560
(* Security fix *)
|
Current (x86)
Fri Jun 18 20:33:08 UTC 2021
a/kernel-generic-5.12.12-i586-1.txz: Upgraded.
a/kernel-generic-smp-5.12.12_smp-i686-1.txz: Upgraded.
a/kernel-huge-5.12.12-i586-1.txz: Upgraded.
a/kernel-huge-smp-5.12.12_smp-i686-1.txz: Upgraded.
a/kernel-modules-5.12.12-i586-1.txz: Upgraded.
a/kernel-modules-smp-5.12.12_smp-i686-1.txz: Upgraded.
a/upower-0.99.12-i586-1.txz: Upgraded.
d/kernel-headers-5.12.12_smp-x86-1.txz: Upgraded.
d/rust-1.53.0-i686-1.txz: Upgraded.
k/kernel-source-5.12.12_smp-noarch-1.txz: Upgraded.
kde/kdeconnect-kde-21.04.2-i586-2.txz: Rebuilt.
Recompiled against pulseaudio-qt-1.3.
l/gdbm-1.20-i586-1.txz: Upgraded.
n/bind-9.16.18-i586-1.txz: Upgraded.
n/openvpn-2.5.3-i586-1.txz: Upgraded.
extra/linux-5.12.12-nosmp-sdk/*: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|
Current (x86_64)
Fri Jun 18 20:33:08 UTC 2021
a/kernel-generic-5.12.12-x86_64-1.txz: Upgraded.
a/kernel-huge-5.12.12-x86_64-1.txz: Upgraded.
a/kernel-modules-5.12.12-x86_64-1.txz: Upgraded.
a/upower-0.99.12-x86_64-1.txz: Upgraded.
d/kernel-headers-5.12.12-x86-1.txz: Upgraded.
d/rust-1.53.0-x86_64-1.txz: Upgraded.
k/kernel-source-5.12.12-noarch-1.txz: Upgraded.
kde/kdeconnect-kde-21.04.2-x86_64-2.txz: Rebuilt.
Recompiled against pulseaudio-qt-1.3.
l/gdbm-1.20-x86_64-1.txz: Upgraded.
n/bind-9.16.18-x86_64-1.txz: Upgraded.
n/openvpn-2.5.3-x86_64-1.txz: Upgraded.
isolinux/initrd.img: Rebuilt.
kernels/*: Upgraded.
usb-and-pxe-installers/usbboot.img: Rebuilt.
|