mirror of
git://slackware.nl/current.git
synced 2025-01-29 08:36:40 +01:00
b9cb99a88e
patches/packages/curl-8.2.0-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
fopen race condition.
For more information, see:
https://curl.se/docs/CVE-2023-32001.html
https://www.cve.org/CVERecord?id=CVE-2023-32001
(* Security fix *)
patches/packages/openssh-9.3p2-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
ssh-agent(1) in OpenSSH between and 5.5 and 9.3p1 (inclusive): remote code
execution relating to PKCS#11 providers.
The PKCS#11 support ssh-agent(1) could be abused to achieve remote code
execution via a forwarded agent socket if the following conditions are met:
* Exploitation requires the presence of specific libraries on the victim
system.
* Remote exploitation requires that the agent was forwarded to an
attacker-controlled system.
Exploitation can also be prevented by starting ssh-agent(1) with an empty
PKCS#11/FIDO allowlist (ssh-agent -P '') or by configuring an allowlist that
contains only specific provider libraries.
This vulnerability was discovered and demonstrated to be exploitable by the
Qualys Security Advisory team.
Potentially-incompatible changes:
* ssh-agent(8): the agent will now refuse requests to load PKCS#11 modules
issued by remote clients by default. A flag has been added to restore the
previous behaviour: "-Oallow-remote-pkcs11".
For more information, see:
https://www.openssh.com/txt/release-9.3p2
https://www.cve.org/CVERecord?id=CVE-2023-38408
(* Security fix *)
|
||
|---|---|---|
| .. | ||
| linux-5.15.117 | ||
| aaa_base-15.0-x86_64-4_slack15.0.txt | ||
| apr-1.7.2-x86_64-1_slack15.0.txt | ||
| apr-util-1.6.3-x86_64-1_slack15.0.txt | ||
| at-3.2.3-x86_64-1_slack15.0.txt | ||
| bind-9.16.42-x86_64-1_slack15.0.txt | ||
| bluez-5.64-x86_64-1_slack15.0.txt | ||
| boost-1.78.0-x86_64-2_slack15.0.txt | ||
| c-ares-1.19.1-x86_64-1_slack15.0.txt | ||
| ca-certificates-20230506-noarch-1_slack15.0.txt | ||
| cups-2.4.6-x86_64-1_slack15.0.txt | ||
| cups-filters-1.28.17-x86_64-1_slack15.0.txt | ||
| curl-8.2.0-x86_64-1_slack15.0.txt | ||
| cyrus-sasl-2.1.28-x86_64-1_slack15.0.txt | ||
| dhcp-4.4.3_P1-x86_64-1_slack15.0.txt | ||
| dnsmasq-2.87-x86_64-1_slack15.0.txt | ||
| emacs-27.2-x86_64-2_slack15.0.txt | ||
| expat-2.5.0-x86_64-1_slack15.0.txt | ||
| flac-1.3.4-x86_64-1_slack15.0.txt | ||
| freerdp-2.9.0-x86_64-1_slack15.0.txt | ||
| git-2.35.8-x86_64-1_slack15.0.txt | ||
| glibc-zoneinfo-2023c-noarch-1_slack15.0.txt | ||
| gnupg2-2.2.36-x86_64-1_slack15.0.txt | ||
| gnutls-3.7.9-x86_64-1_slack15.0.txt | ||
| gzip-1.12-x86_64-1_slack15.0.txt | ||
| httpd-2.4.57-x86_64-1_slack15.0.txt | ||
| hunspell-1.7.1-x86_64-1_slack15.0.txt | ||
| hwdata-0.367-noarch-1_slack15.0.txt | ||
| irssi-1.4.4-x86_64-1_slack15.0.txt | ||
| kernel-firmware-20230620_045b213-noarch-1.txt | ||
| krb5-1.19.2-x86_64-4_slack15.0.txt | ||
| krusader-2.8.0-x86_64-1_slack15.0.txt | ||
| ksh93-1.0.6-x86_64-1_slack15.0.txt | ||
| libarchive-3.6.2-x86_64-2_slack15.0.txt | ||
| libksba-1.6.3-x86_64-1_slack15.0.txt | ||
| libmilter-8.17.2-x86_64-1_slack15.0.txt | ||
| libssh-0.10.5-x86_64-1_slack15.0.txt | ||
| libtiff-4.4.0-x86_64-1_slack15.0.txt | ||
| libX11-1.8.6-x86_64-1_slack15.0.txt | ||
| libxml2-2.9.14-x86_64-1_slack15.0.txt | ||
| libXpm-3.5.15-x86_64-1_slack15.0.txt | ||
| libxslt-1.1.35-x86_64-1_slack15.0.txt | ||
| mariadb-10.5.18-x86_64-1_slack15.0.txt | ||
| mozilla-firefox-102.13.0esr-x86_64-1_slack15.0.txt | ||
| mozilla-nss-3.87-x86_64-1_slack15.0.txt | ||
| mozilla-thunderbird-102.13.0-x86_64-1_slack15.0.txt | ||
| net-snmp-5.9.3-x86_64-1_slack15.0.txt | ||
| netatalk-3.1.15-x86_64-1_slack15.0.txt | ||
| network-scripts-15.0-noarch-19_slack15.0.txt | ||
| ntfs-3g-2022.10.3-x86_64-1_slack15.0.txt | ||
| ntp-4.2.8p17-x86_64-1_slack15.0.txt | ||
| openssh-9.3p2-x86_64-1_slack15.0.txt | ||
| openssl-1.1.1u-x86_64-1_slack15.0.txt | ||
| openssl-solibs-1.1.1u-x86_64-1_slack15.0.txt | ||
| perl-5.34.0-x86_64-2_slack15.0.txt | ||
| php-7.4.33-x86_64-3_slack15.0.txt | ||
| pidgin-2.14.10-x86_64-1_slack15.0.txt | ||
| polkit-0.120-x86_64-3_slack15.0.txt | ||
| poppler-21.12.0-x86_64-2_slack15.0.txt | ||
| python3-3.9.17-x86_64-1_slack15.0.txt | ||
| qt5-5.15.3_20220318_e507d3e5-x86_64-1_slack15.0.txt | ||
| rsync-3.2.7-x86_64-1_slack15.0.txt | ||
| ruby-3.0.6-x86_64-1_slack15.0.txt | ||
| rxvt-unicode-9.26-x86_64-3_slack15.0.txt | ||
| samba-4.15.13-x86_64-1_slack15.0.txt | ||
| sdl-1.2.15-x86_64-13_slack15.0.txt | ||
| seamonkey-2.53.16-x86_64-1_slack15.0.txt | ||
| sudo-1.9.14p2-x86_64-1_slack15.0.txt | ||
| sysstat-12.7.1-x86_64-1_slack15.0.txt | ||
| tar-1.34-x86_64-2_slack15.0.txt | ||
| texlive-2023.230322-x86_64-1_slack15.0.txt | ||
| util-linux-2.37.4-x86_64-1_slack15.0.txt | ||
| vim-9.0.1667-x86_64-1_slack15.0.txt | ||
| vim-gvim-9.0.1667-x86_64-1_slack15.0.txt | ||
| wavpack-5.5.0-x86_64-1_slack15.0.txt | ||
| whois-5.5.17-x86_64-1_slack15.0.txt | ||
| xfce4-settings-4.16.5-x86_64-1_slack15.0.txt | ||
| xorg-server-1.20.14-x86_64-8_slack15.0.txt | ||
| xorg-server-xephyr-1.20.14-x86_64-8_slack15.0.txt | ||
| xorg-server-xnest-1.20.14-x86_64-8_slack15.0.txt | ||
| xorg-server-xvfb-1.20.14-x86_64-8_slack15.0.txt | ||
| xorg-server-xwayland-21.1.4-x86_64-7_slack15.0.txt | ||
| xscreensaver-6.06-x86_64-1_slack15.0.txt | ||
| xz-5.2.5-x86_64-4_slack15.0.txt | ||
| zlib-1.2.13-x86_64-1_slack15.0.txt | ||
| zstd-1.5.5-x86_64-1_slack15.0.txt | ||