Slackwarearm-current ChangeLog (2018-06-01)
Fri Jun 01 08:08:08 UTC 2018
The mini root filesystem for -current has been updated:
ftp://ftp.arm.slackware.com/slackwarearm/slackwarearm-devtools/minirootfs/
Packages
Upgraded
- a/kernel-modules-armv7-4.16.13_armv7-arm-1.txz
- a/kernel_armv7-4.16.13-arm-1.txz
- ap/slackpkg-2.83.0-noarch-1.txz
Release 2.83.0; thanks to orbea, Didier Spaier, burdi01, David Allen,
Eduard Rozenberg, and Stuart Winter for various fixes and enhancements.
Allow using vimdiff to compare .new and original files
Numerous fixups for alternate $ROOT
.new config files are sorted so that display order should be consistent
among multiple machines
mandoc lint fixes to slackpkg.8
Warn user if a -current mirror is selected (but only warn once) - d/git-2.17.1-arm-1.txz
This update fixes security issues:
Submodule “names” come from the untrusted .gitmodules file, but we
blindly append them to $GIT_DIR/modules to create our on-disk repo
paths. This means you can do bad things by putting “../” into the
name. We now enforce some rules for submodule names which will cause
Git to ignore these malicious names (CVE-2018-11235).
Credit for finding this vulnerability and the proof of concept from
which the test script was adapted goes to Etienne Stalmans.
It was possible to trick the code that sanity-checks paths on NTFS
into reading random piece of memory (CVE-2018-11233).
Credit for fixing for these bugs goes to Jeff King, Johannes
Schindelin and others.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11233
(* Security fix *) - d/kernel-headers-4.16.13-arm-1.txz
- d/rust-1.26.1-arm-1.txz
- k/kernel-source-4.16.13-arm-1.txz
- l/fftw-3.3.8-arm-1.txz
- l/imagemagick-6.9.9_48-arm-1.txz
- n/stunnel-5.46-arm-1.txz
- kernels/*
Rebuilt
- a/pkgtools-15.0-noarch-8.txz
installpkg: Suppport –terselength to set the maximum length of a line
output in –terse mode.
removepkg: Use file locking to allow only one instance at a time of ldconfig.
Added –terse mode.
upgradepkg: Added –terse mode to output one line per upgraded package.
Suppport –terselength to set the maximum length of a line
output in –terse mode.
Accept -option in addition to –option. - n/network-scripts-15.0-noarch-6.txz
Allow setting an interface in promiscuous mode; this is needed for networking
to function properly in containers
Fixup setting of IPALIASES (allow non /32 masks; not only is the /32 mask not
required and even undesirable in some cases, this makes ipv6 support easier
to integrate (and Darren is working on that as well)
Thanks to Darren Austin. - n/ulogd-2.0.7-arm-2.txz
Fixed empty logrotate file. - x/xorg-server-1.20.0-arm-2.txz
Patched to fix nouveau segfault. Thanks to Rod3775 for the patch. - x/xorg-server-xephyr-1.20.0-arm-2.txz
- x/xorg-server-xnest-1.20.0-arm-2.txz
- x/xorg-server-xvfb-1.20.0-arm-2.txz
- xap/network-manager-applet-1.8.12-arm-2.txz
Patched crash bug. Thanks to gmgf. - isolinux/*