This is an old revision of the document!
Slackwarearm-14.2 ChangeLog (2015-08-01)
Sat Aug 1 13:38:59 UTC 2015
/INSTALL_BANANAPI.TXT: Updated.
Added support for the Banana Pi Pro.
Packages
Rebuilt
- ap/slackpkg-2.82.0-noarch-14.txz
Patched to abort immediately if the date is not recent (at least July 2015).
This is usually a problem with Raspberry Pi systems that do not have an RTC,
and where no NTP client has been configured: resulting in the system's date
being at UNIX Epoch time (1970).
With the date so far in the past, GPG fails with a generic verification
failure message, resulting in confusion as to whether the packages or keys
have been tampered with.
Upgraded
- n/bind-9.10.2_P3-arm-1.txz
This update fixes a security issue where an error in the handling of TKEY
queries can be exploited by an attacker for use as a denial-of-service
vector, as a constructed packet can use the defect to trigger a REQUIRE
assertion failure, causing BIND to exit.
Impact:
Both recursive and authoritative servers are vulnerable to this defect.
Additionally, exposure is not prevented by either ACLs or configuration
options limiting or denying service because the exploitable code occurs
early in the packet handling, before checks enforcing those boundaries.
Operators should take steps to upgrade to a patched version as soon as
possible.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477
https://kb.isc.org/article/AA-01272
(* Security fix *)