Redigerad: 2019-03-04 10:03:50 av: mdkdio
[slackware-security] python (SSA:2019-062-01)
New python packages are available for Slackware 14.0, 14.1, 14.2, and -current
to fix security issues.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/python-2.7.16-i586-1_slack14.2.txz: Upgraded.
Updated to the latest 2.7.x release, which fixes a few security issues.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14647
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5010
(* Security fix *)
+--------------------------+
[slackware-security] infozip (SSA:2019-060-01)
New infozip packages are available for Slackware 14.0, 14.1, 14.2, and -current
to fix security issues.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/infozip-6.0-i586-4_slack14.2.txz: Rebuilt.
Added some patches that should fix extracting archives with non-latin
characters in the filenames. Thanks to saahriktu.
This update also fixes various security issues in zip and unzip.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8139
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8140
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8141
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9844
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18384
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000035
(* Security fix *)
Redigerad: 2019-02-28 15:55:40 av: mdkdio
[slackware-security] openssl (slackware 14.2) (SSA:2019-057-01)
New openssl packages are available for Slackware 14.2 to fix a security issue.
Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/openssl-1.0.2r-i586-1_slack14.2.txz: Upgraded.
Go into the error state if a fatal alert is sent or received. If an
application calls SSL_shutdown after a fatal alert has occured and
then behaves different based on error codes from that function then
the application may be vulnerable to a padding oracle.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1559
(* Security fix *)
patches/packages/openssl-solibs-1.0.2r-i586-1_slack14.2.txz: Upgraded.
**********
Wed Feb 27 23:21:15 UTC 2019
curl-7.64.0-x86_64-2_slack14.2.txz: Rebuilt.
Applied upstream patch to fix log spam:
[PATCH] multi: remove verbose "Expire in" ... messages
Thanks to compassnet.
Ny kernel 4.19.26
För att se vad som åtgärdats och uppdaterats så vänligen kolla changelog i länken ovan.
Slackware Current uppdaterat med ny kärna...
RSS resultat...
Till minne av Håkan Nilsson
Mitt Slackware
Appendix Programhantering