SlackwareLinux.se - Den Svenska Slackware-sidan!

Säkerhets uppdatering 29/5 -21

Skriven Av: mdkdio Den: 2021-05-30 09:20:43
Redigerad: 2021-06-10 22:04:21 av: mdkdio

[slackware-security] httpd (SSA:2021-158-01)

New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current
to fix security issues.

Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/httpd-2.4.48-i586-1_slack14.2.txz: Upgraded.
  This release contains security fixes and improvements.
  mod_http2: Fix a potential NULL pointer dereference.
  Unexpected <Location> section matching with 'MergeSlashes OFF'.
  mod_auth_digest: possible stack overflow by one nul byte while validating
  the Digest nonce.
  mod_session: Fix possible crash due to NULL pointer dereference, which
  could be used to cause a Denial of Service with a malicious backend
  server and SessionHeader.
  mod_session: Fix possible crash due to NULL pointer dereference, which
  could be used to cause a Denial of Service.
  mod_proxy_http: Fix possible crash due to NULL pointer dereference, which
  could be used to cause a Denial of Service.
  mod_proxy_wstunnel, mod_proxy_http: Handle Upgradable protocols end-to-end
  negotiation.
  For more information, see:
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31618
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30641
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35452
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26691
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26690
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13950
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17567
  (* Security fix *)
+--------------------------+

Kernel 5.12.8 RC1 / 5.10.41 RC1 / 5.4.123 RC1

Skriven Av: mdkdio Den: 2021-05-27 20:46:52
Redigerad: 2021-05-29 07:19:32 av: mdkdio

Och så fortsätter det...

Kernel 5.12.8 RC1 med 7 uppdateringar/ändringar sedan 5.12.7
Kernel 5.10.41 RC1 med 9 uppdateringar/ändringar sedan 5.10.40
Kernel 5.4.123 RC1 med 7 uppdateringar/ändringar sedan 5.4.122

Redigerat:

Ovan listade kärnor släpptes igår. Changelog finns länkad i "modulen" till höger.

Säkerhets uppdatering 26/5 -21

Skriven Av: mdkdio Den: 2021-05-27 08:35:17
Redigerad: 2021-05-27 16:23:12 av: mdkdio

[slackware-security] curl (SSA:2021-146-01)

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to
fix security issues.

Skypeforlinux 8.72.0.94 (26/5-21)

Skriven Av: mdkdio Den: 2021-05-26 20:37:33

Senaste version av Skypeforlinux, 8.72.0.94 släpptes idag.

Kan hämtas här
(Välj rätt version!!)

Slackbuild för 14.2
Slackbuild för current

Säkerhetsuppdateringar

Skriven Av: mdkdio Den: 2021-05-26 05:59:26

slackware-security] gnutls (SSA:2021-145-01)

New gnutls packages are available for Slackware 14.2 and -current to
fix security issues.

Info om cookies:
Cookies

RSS resultat...

Håkans Slackware

Senaste Kernel Versioner

Slackware® är ett registrerat varumärke tillhörande Patrick Volkerding & Slackware Linux Inc. Slackware ® Patrick Volkerding & Slackware Inc

Länkar