This is an old revision of the document!
Slackware64-14.2 ChangeLog (2020-03-31)
Tue Mar 31 19:01:17 UTC 2020
Packages
Upgraded
- patches/packages/gnutls-3.6.13-x86_64-1_slack14.2.txz
This update fixes a security issue:
libgnutls: Fix a DTLS-protocol regression (caused by TLS1.3 support),
since 3.6.3. The DTLS client would not contribute any randomness to the
DTLS negotiation, breaking the security guarantees of the DTLS protocol.
[GNUTLS-SA-2020-03-31, CVSS: high]
(* Security fix *) - patches/packages/httpd-2.4.43-x86_64-1_slack14.2.txz
This release contains security fixes (since 2.4.39) and improvements.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10097
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9517
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10098
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10092
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10082
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10081
(* Security fix *)