Differences

This shows you the differences between two versions of the page.

--- changelog_14.2 [2019/12/20 00:06] – connie
+++ changelog_14.2 [2019/12/21 21:41] – connie
@@ Line 2: / Line 2: @@
 Slackware upstream ChangeLog entries are courtesy of Patrick Volkerding.
+==== 2019-12-21 ====
+**openssl-1.0.2u**:  Upgraded.
+This update fixes a low severity security issue:
+Fixed an an overflow bug in the x86_64 Montgomery squaring procedure used in
+exponentiation with 512-bit moduli.
+For more information, see:
+  * https://www.openssl.org/news/secadv/20191206.txt
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551
+(**Security fix**)
+**openssl-solibs-1.0.2u**:  Upgraded.
+**tigervnc-1.10.1**:  Upgraded.
+From tigervnc.org: "This is a security release to fix a number of issues
+that were found by Kaspersky Lab. These issues affect both the client and
+server and could theoretically allow a malicious peer to take control
+over the software on the other side. No working exploit is known at this
+time, and the issues require the peer to first be authenticated. We still
+urge users to upgrade when possible."
+(**Security fix**)
 ==== 2019-12-19 ====