Salta al contenuto principale

8 updates. Including a (* Security fix *)!

Thu Jan 26 00:34:41 UTC 2023
ap/cups-filters-1.28.17-i586-1.txz: Upgraded.
ap/vim-9.0.1241-i586-1.txz: Upgraded.
Fixed a security issue:
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
Thanks to marav for the heads-up.
For more information, see:
(* Security fix *)
d/guile-3.0.9-i586-1.txz: Upgraded.
d/poke-3.0-i586-1.txz: Upgraded.
l/nodejs-19.5.0-i586-1.txz: Upgraded.
n/bind-9.18.11-i586-1.txz: Upgraded.
This update fixes bugs and the following security issues:
An UPDATE message flood could cause :iscman:`named` to exhaust all
available memory. This flaw was addressed by adding a new
:any:`update-quota` option that controls the maximum number of
outstanding DNS UPDATE messages that :iscman:`named` can hold in a
queue at any given time (default: 100).
:iscman:`named` could crash with an assertion failure when an RRSIG
query was received and :any:`stale-answer-client-timeout` was set to a
non-zero value. This has been fixed.
:iscman:`named` running as a resolver with the
:any:`stale-answer-client-timeout` option set to any value greater
than ``0`` could crash with an assertion failure, when the
:any:`recursive-clients` soft quota was reached. This has been fixed.
For more information, see:
(* Security fix *)
n/openvpn-2.6.0-i586-1.txz: Upgraded.
xap/vim-gvim-9.0.1241-i586-1.txz: Upgraded.