mirror of
git://slackware.nl/current.git
synced 2024-12-31 10:28:29 +01:00
40bf9bf864
patches/packages/ca-certificates-20220622-noarch-1_slack15.0.txz: Upgraded.
This update provides the latest CA certificates to check for the
authenticity of SSL connections.
patches/packages/openssl-1.1.1p-x86_64-1_slack15.0.txz: Upgraded.
In addition to the c_rehash shell command injection identified in
CVE-2022-1292, further circumstances where the c_rehash script does not
properly sanitise shell metacharacters to prevent command injection were
found by code review.
When the CVE-2022-1292 was fixed it was not discovered that there
are other places in the script where the file names of certificates
being hashed were possibly passed to a command executed through the shell.
For more information, see:
https://www.openssl.org/news/secadv/20220621.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
(* Security fix *)
patches/packages/openssl-solibs-1.1.1p-x86_64-1_slack15.0.txz: Upgraded.
|
||
|---|---|---|
| .. | ||
| aaa_base | ||
| at | ||
| bind | ||
| bluez | ||
| boost | ||
| ca-certificates | ||
| cups | ||
| curl | ||
| cyrus-sasl | ||
| expat | ||
| flac | ||
| freerdp | ||
| git | ||
| glibc-zoneinfo | ||
| gzip | ||
| httpd | ||
| libarchive | ||
| libxml2 | ||
| libxslt | ||
| mariadb | ||
| mozilla-firefox | ||
| mozilla-thunderbird | ||
| openssl | ||
| php | ||
| pidgin | ||
| polkit | ||
| python3 | ||
| qt5 | ||
| ruby | ||
| samba | ||
| seamonkey | ||
| util-linux | ||
| vim | ||
| whois | ||
| xz | ||
| zlib | ||