Differences

This shows you the differences between two versions of the page.

--- changelog_14.2 [2019/11/21 20:40] – connie
+++ changelog_14.2 [2019/12/21 21:41] – connie
@@ Line 2: / Line 2: @@
 Slackware upstream ChangeLog entries are courtesy of Patrick Volkerding.
+==== 2019-12-21 ====
+**openssl-1.0.2u**:  Upgraded.
+This update fixes a low severity security issue:
+Fixed an an overflow bug in the x86_64 Montgomery squaring procedure used in
+exponentiation with 512-bit moduli.
+For more information, see:
+  * https://www.openssl.org/news/secadv/20191206.txt
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551
+(**Security fix**)
+**openssl-solibs-1.0.2u**:  Upgraded.
+**tigervnc-1.10.1**:  Upgraded.
+From tigervnc.org: "This is a security release to fix a number of issues
+that were found by Kaspersky Lab. These issues affect both the client and
+server and could theoretically allow a malicious peer to take control
+over the software on the other side. No working exploit is known at this
+time, and the issues require the peer to first be authenticated. We still
+urge users to upgrade when possible."
+(**Security fix**)
+==== 2019-12-19 ====
+**bind-9.11.14**:  Upgraded.
+This is a bugfix release:
+Fixed a bug that caused named to leak memory on reconfiguration when
+any GeoIP2 database was in use. [GL #1445]
+Fixed several possible race conditions discovered by Thread Sanitizer.
+**wavpack-5.2.0**:  Upgraded.
+Fixed denial-of-service and other potential security issues.
+For more information, see:
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19840
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19841
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10536
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10537
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10538
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10539
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10540
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7254
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7253
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6767
+(**Security fix**)
+**ca-certificates-20191130**:  Upgraded.
+This update provides the latest CA certificates to check for the
+authenticity of SSL connections.
 ==== 2019-11-21 ====