ChangeLog for: 2022-03-15 01:13:59
l/gst-plugins-bad-free-1.20.1-x86_64-1.txz: Upgraded.
l/gst-plugins-base-1.20.1-x86_64-1.txz: Upgraded.
l/gst-plugins-good-1.20.1-x86_64-1.txz: Upgraded.
l/gst-plugins-libav-1.20.1-x86_64-1.txz: Upgraded.
l/gstreamer-1.20.1-x86_64-1.txz: Upgraded.
n/httpd-2.4.53-x86_64-1.txz: Upgraded.
This update fixes bugs and the following security issues:
mod_sed: Read/write beyond bounds
core: Possible buffer overflow with very large or unlimited
LimitXMLRequestBody
HTTP request smuggling vulnerability
mod_lua: Use of uninitialized value in r:parsebody
For more information, see:
https://downloads.apache.org/httpd/CHANGES_2.4.53
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23943
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22721
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22720
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22719
(* Security fix *)
xap/mozilla-firefox-98.0.1-x86_64-1.txz: Upgraded.
This release makes the following change:
Yandex and Mail.ru have been removed as optional search providers in the
drop-down search menu in Firefox.
For more information, see:
https://www.mozilla.org/en-US/firefox/98.0.1/releasenotes/
(* Security fix *)